ISS Warns Of New Denial Of Service Hacker Utilities

Internet Security Systems (ISS) has warned its customers and the IT
security industry at large of new variants of the distributed denial
of service (DDOS) utilities that brought down several major Web sites
earlier this year.

The DDOS utilities, which hackers used to down eBay, Amazon, Yahoo
and dozens of other major portals, have resurfaced in new variants of
Trinity and Stacheldraht, the two main DDOS utilities, the firm's
X-Force security alert team said.

The firm adds that the new versions of Stacheldraht include
"Stacheldraht 1.666+antigl+yps" and "Stacheldraht 1.666+smurf+yps,"
while a variant of the Trinity tool called "entitee" has also been
reported. All of the variants have been found in the wild - i.e., in
general circulation.

ISS said that the new tools were detected in corporate networks, as
well as in PC with high-speed network connections. The firm also
warned that the prevalence of high speed DSL (digital subscriber
line) and cable modem service magnifies these tools' potential
effectiveness.

The company has posted a full breakdown on how the Stacheldraht and
other DDOS programs work on its Web site at
http://xforce.iss.net/alerts/advise43.php.

Reported by Newsbytes.com, http://www.newsbytes.com.