🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.sys.ibm.pc.games.rpg
Article #720157

Re: Ramnit Financial Malware Now Aimed at Steam Gamers

#720157
From: Xocyll
Date: Fri, 30 Aug 2013 00:35
18 lines
1825 bytes
Justisaur <just...@gmail.com> looked up from reading the entrails of
the porn spammer to utter  "The Augury is good, the signs say:

>On Wednesday, August 28, 2013 6:31:35 AM UTC-7, Xocyll wrote:
>> Just read in comp.risk about this, since lots here use steam, keep your
>> spyware checks up to date.
>> 
>> http://redmondmag.com/articles/2013/08/21/ramnit-financial-malware.aspx
>> 
>> Xocyll
>
>Hmm.  Doesn't say what method they are using to install the malware?

It's a worm, so the usual suspects: infected usb devices, email
attachments, compromised websites using javashit exploits to install it
and so on.

Xocyll
Technical Details
Message-ID: <rupv199ce2qetj0612vl5lm7eh0fhpr2js@4ax.com>
Path: mbox-mo1.pugleaf.net!ed8ni72666wic.0!nntp.google.com!feeder1.cambriumusenet.nl!feed.tweaknews.nl!87.79.20.101.MISMATCH!newsreader4.netcologne.de!news.netcologne.de!news.swapon.de!eternal-september.org!feeder.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
References: <9rur195nnl9go949730l3887v02a7rcg8d@4ax.com> <c8f7befa-ff23-4f74-bbbf-5c7085b99888@googlegroups.com>

Show Full Headers
Complete Article Headers
X-Received: by 10.180.80.227 with SMTP id u3mr133417wix.5.1377822930117;        Thu, 29 Aug 2013 17:35:30 -0700 (PDT)
Path: mbox-mo1.pugleaf.net!ed8ni72666wic.0!nntp.google.com!feeder1.cambriumusenet.nl!feed.tweaknews.nl!87.79.20.101.MISMATCH!newsreader4.netcologne.de!news.netcologne.de!news.swapon.de!eternal-september.org!feeder.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: Xocyll <Xoc...@kingston.net>
Newsgroups: comp.sys.ibm.pc.games.rpg
Subject: Re: Ramnit Financial Malware Now Aimed at Steam Gamers
Date: Thu, 29 Aug 2013 20:35:49 -0400
Organization: A noiseless patient Spider
Lines: 18
Message-ID: <rupv199ce2qetj0612vl5lm7eh0fhpr2js@4ax.com>
References: <9rur195nnl9go949730l3887v02a7rcg8d@4ax.com> <c8f7befa-ff23-4f74-bbbf-5c7085b99888@googlegroups.com>
Mime-Version: 1.0
Injection-Info: mx05.eternal-september.org; posting-host="1e38abfa49a8bd76702c6b9914000720"; logging-data="27959"; mail-complaints-to="ab...@eternal-september.org"; posting-account="U2FsdGVkX18z4bmh0ElFwe9URPcxcort"
X-Newsreader: Forte Agent 2.0/32.640
Cancel-Lock: sha1:+WZToIX+J2Uvi0Kv+mYvsv4wLd8=
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit