10/24/2008
Alert Targeted attacks are under way in Belgium
heard it through the rumor mill but as indicated in the blog posting from Microsoft why they posted the patch now there are targeted attacks under way here
So if you are a bank, a financial institution, a big enterprise or something that has some interest for others .....
you should look for low level attacks on 1 or 2 internal addresses (filter logs on green in from only outside to only internal addresses) if you have no green this doesn't mean that you are not infected. This could have been done by websurfing or email. But normally if you look at these logs you will discover some information.
If you control the logs if you have those internal machines you will probably also see that one or more of these machines have been scanning your network the day before or so. If you have such PC's you must look in the firewall logs the other way round.
It comes from the usual suspect countries
15:43 | Permalink | Comments (0) | Email this
|
|
del.icio.us
|
|
Digg |
Facebook




Post a comment