You could try browsing around alt.comp.virus.source.code

Also, a good source for general security I've found is InfoSysSec... You could look there too, although I'm not sure if they have a section...