ZDNet UK: Vandals mutate Ramen Linux wormJan 23, 2001, 16:43 (10 Talkback[s])
(Other stories by Robert Lemos)
"After infecting NASA and Texas A&M University last week, the worm is making its move on Linux servers abroad, as vandals use the program to post digital graffiti. Online vandals may have modified the Ramen Linux worm discovered last week to automatically deface sites with their own Web pages, one expert said Monday."
"Several [vandal] groups are suddenly switching to Red Hat," said Matt Dickerson, also known as "Munge", a staff member at security group Attrition.org. "We think they are modifying the HTML pages in the worm with their own text and graphics."
"...the fear among experts is not that the current worm will spread but that nastier varieties will attempt to use the same flaws to gain access to online servers. "This worm doesn't do anything all that bad," Lance Spitzner, coordinator with the security group Honeynet Project, said in an interview last week. "It could be much, much worse."