TELNET_w00w00 attempt


Code: p319

Severity: Warning


Description: w00w00 is a Trojan Horse utilizing Telnet. This event is generated when an attacker attempts to connect to a w00w00 server using Telnet.

Impact: Possible theft of data and control of the targeted machine leading to a compromise of all resources the machine is connected to. This Trojan also has the ability to delete data, steal passwords and disable the machine.

Corrective: Disallow Telnet access from external sources. Delete the Trojan and kill any associated processes.