Sinit P2P Trojan Analysis

FYI...from the Internet Storm Center:
- http://isc.sans.org/diary.html
Updated December 13th 2003 19:35 EDT
Port 10 traffic; 139 &1433 report; DCE RPC Vectors
"...
- Port 53 update
"...Earlier this week, Lurhq posted an analysis of a particular Trojan, which uses malformated 'DNS' queries to communicate:
- http://www.lurhq.com/sinit.html
Sinit P2P Trojan Analysis
"...This trojan is also further evidence that money, not notoriety, is now the major driving force behind the spread of malware these days..."

-