Case Study:  AntiADM3,14
•Released 5/98 Written by Max Vision
•ADMworm Response: Scans, Patches, Backdoors
•
•Scans for systems vulnerable to iquery named hole
•Exploits remote system
•Patches iquery hole (upgrades named)
•Installs a backdoor
•Installs itself on system
•
–
–