Case Study:  Cheese5
•Discovered 5/01 Unknown Author
•Lion Worm Response: Scans, Disinfects
•
•Scans for systems infected by Lion
•Installs itself using backdoor left by Lion
•Removes Lion backdoor from system
•
•
–
–