To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ---------- that brings up possible legality issues, as you're now executing commands on the victim PCs, even if all you're doing is executing a kill/uninstall feature -- I think it's best, for future forensic work to leave the bots as is without interference.
On 3/3/06, Dan <[EMAIL PROTECTED]> wrote: > To report a botnet PRIVATELY please email: [EMAIL PROTECTED] > ---------- > Yanno, Most bot code I've seen has a 'kill' or uninstall feature built > in. > > It might be an idea to built a "counter" botnet, that will act in our > favor when a botnet is found. We could have a bot infiltrate the > existing net, and attempt to issue a number of kill/uninstall commands, > so the net will eat itself. > > *shrug* > > -dan > > > -----Original Message----- > From: Thomas Raef [mailto:[EMAIL PROTECTED] > Sent: Friday, March 03, 2006 9:00 AM > To: Gadi Evron > Cc: [EMAIL PROTECTED] > Subject: Re: [botnets] is there a list of botnet hostnames somewhere ? > > To report a botnet PRIVATELY please email: [EMAIL PROTECTED] > ---------- > Oh yeah, this is a litigious society. > > We would have to establish rules for determining a botnet. We'd remove a > host when we've confirmed the traffic has been stopped. > > I love that this mailing list is going. Nice job of getting things > started. > > > -----Original Message----- > From: Gadi Evron [mailto:[EMAIL PROTECTED] > Sent: Friday, March 03, 2006 10:56 AM > To: Thomas Raef > Cc: Famozo Pikantini; [EMAIL PROTECTED] > Subject: Re: [botnets] is there a list of botnet hostnames somewhere ? > > Thomas Raef wrote: > > I would be willing to support a list of known botnets on my site. Or > > create a whole new domain, like botnetbusters.com or something else. > > Good luck! > > Some points of discussion: > 1. Liability - what if you get sued? > 2. Reliability - how do you make sure it's a botnet? > 3. Continual reliability - how do you know when to remove a host? > > Etc. Etc. > > Like I said, we will do this if this first effort of a public mailing > list succeeds, but I won't stand in the way of any other effort. I love > diversity. :) _______________________________________________ > botnets mailing list > To report a botnet PRIVATELY please email: [EMAIL PROTECTED] > http://www.whitestar.linuxbox.org/mailman/listinfo/botnets > _______________________________________________ > botnets mailing list > To report a botnet PRIVATELY please email: [EMAIL PROTECTED] > http://www.whitestar.linuxbox.org/mailman/listinfo/botnets > _______________________________________________ botnets mailing list To report a botnet PRIVATELY please email: [EMAIL PROTECTED] http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
