My weblog about all things that interest me (and hopefully you): viruses, programming in general, death & black metal, certain web sites... Well, it could be anything.

Thursday, January 27, 2005

A worm for MySQL?

Slashdot has an article on what seems to be a worm propagating using MySQL on Windows that is configured with a weak root password. More information can be found here.


Click here for full graph


I wonder how many web servers will get severe problems because of the many attacks on port 3306...

Update: I suspect the worm is written by some dutch person (or belgian) because it connects to an IRC server and goes to a channel named "#rampenstampen" which is typically dutch.

No comments: