heres a intresting site about it:
http://www.cert.org/incident_notes/IN-2001-13.html
seems its been around for some time, since Nov 27 2001