“After infecting NASA and Texas A&M University last week,
the worm is making its move on Linux servers abroad, as vandals use
the program to post digital graffiti. Online vandals may have
modified the Ramen Linux worm discovered last week to automatically
deface sites with their own Web pages, one expert said Monday.”
“Several [vandal] groups are suddenly switching to Red Hat,”
said Matt Dickerson, also known as “Munge”, a staff member at
security group Attrition.org. “We think they are modifying the HTML
pages in the worm with their own text and graphics.”
“…the fear among experts is not that the current worm will
spread but that nastier varieties will attempt to use the same
flaws to gain access to online servers. “This worm doesn’t do
anything all that bad,” Lance Spitzner, coordinator with the
security group Honeynet Project, said in an interview last week.
“It could be much, much worse.”