News: MSSQL Worm (sqlsnake) on the rise

[draziw]

Well, much as I said a while ago, looks like that MS SQL snake is on the rise... incidents.org has provided a good handler's diary as well as some detailed analysis of the worm. So far I've not seen any analysis of the email program/client that the worm also uses (with so-called "additional functions").

Here's the link to the diary - I won't bother including the links to the detailed analysis... "left as an exercise to the reader."

[Palemoon]

Well anyone that setup SQL should have known to do the SA thing is part of the install. So lets see how many consultants did the default install and call me back at 125 and hour visit to correct the problem.