Signs of new worm on the way
VeriSign said it's alerting customers that a big Internet worm may be coming, based on traffic anomalies and other data gleaned at its SOCs (Secure Operations Centers).
Engineers said they have noticed increased traffic on port 443 and port 1025 traffic, indicating possible attacks in the works. Also, there is evidence of two vulnerabilites being exploited, one involving SSL and the other RPC, and reports of a working exploit for the ASN.1 Windows vulnerability announced by Microsoft earlier this year, according to VeriSign.
"While we can never predict with true certainty the next big Slammer or Blaster, our statistical traffic modeling surrounding the past weeks traffic has all the telltale markers of a big worm coming," a spokesperson for VeriSign's managed security services said Friday.
