Possible new kiddiescript worm by Q8Crackers
I'm dealing with an issue now where, once the customer logs into squirrelmail, we see:
"Q8Crackers ownz your server"
Limited results on google:
http://www.google.com/search?q=%22Q8...your+server%22
I did find one semi-informational website, but I'm not linking it since he has the code on his page.
Seems to possibly be a VBB worm on the website mentioned & in the Google link, but this customer's squirrel mail was defaced. I'm trying to see how it got in now.
