Although unclassified, this ANSIR-FAX computer advisory should be handled as "Sensitive." It is intended for use by corporate security professionals and law enforcement and should not be further disseminated outside of the corporate security and law enforcement environment nor should it be furnished to the media. Unauthorized disclosure of FBI communications could jeopardize ongoing FBI investigations.
The FBI's Awareness of National Security Issues and Response (ANSIR) Program is designed to develop a nationwide communication network among corporate security professionals, law enforcement, and others on a variety of matters. The ANSIR Coordinator in the local FBI field office is the point of contact for all National Security concerns and questions from U.S. corporations.
Future dissemination of ANSIR Program advisories will be provided via ANSIR email. Recipients of ANSIR-FAX should provide their email addresses to the above listed email address as soon as possible to continue to receive these notices. ANSIR email is designed to reach as many as 100,000 recipients to disseminate unclassified threat and warning information in a timely manner.
Message from FBI National Security Division, Washington, D.C.
Attacks on computers running Microsoft Windows NT and Windows 95.
The FBI was advised that on March 2, 1998, the U.S. Navy, Department of Energy, National Aeronautics Space Administration and several universities running Microsoft Windows NT and Windows 95 operating systems experienced numerous "denial of service" attacks. The attacks caused computers to crash and caused what is referred to as the "Blue Screen of Death" accompanied by a "fatal error" message.
The "denial of service" attack prevents servers from answering network connections and can crash individual computers. The specific exploit use in these attacks is known as "NewTear," or alternativelyi "Teardrop2." Subtle variations to this exploit [i.e., "Bonk" and "Boink"] have also been used in these attacks. The source of these attacks is unknown at this time.
Additional information concerning this matter can be found at the following Internet addresses:
Recipients are encouraged to report any information they may have pertaining to this matter to their local FBI field office NSIR Coordinator, CITA squad/team, or the National Infrastructure Protection Center, FBI Headquarters: 202-324-6715