To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ---------- On Mon, 29 May 2006, Mike Johnson wrote: > To report a botnet PRIVATELY please email: [EMAIL PROTECTED] > ---------- > Seen on shadowserver's news tonight: > http://www.shadowserver.org/news.php > > Looks like there's a botnet on a 'legit' IRC network that seems to be > not only tolerated, but welcomed and being used. Nice. > > Bad, naughty WebChat.org.
Public IRC servers on IRC networks have been used for botnets extensively in the past. Even though they were in denial, the situation in around 2002-2003 was that 20 to 50 per cent of the big networks were drones. Thing about Big Networks is that they are legit services you can't take down, fighting the botnets on IRC is difficult and similar to guerilla fighting. Still, even if they were born there, botnets moved to the use of private servers extensively. They create their own networks with the same redundancy, no one disturbs them on their home turf and bothers them on their servers. The reason to still use IRC networks is that there are many servers there and they won't be taken down, but in this age where a new server can be utilized within seconds and every bot jumped to it / them, directly or via a secondary control channel, means they are not really necessary anymore. They are still used, but private servers are still the thing. The guys at Shadowserver are amazing and great guys, but they are still very new to the business of "botnet hunting" which is why they lack a lot in background and know-how.. Good thing is that they are very quick learners and have some good and experienced people working with them. So far they've had limited exposure to botnets, but they are advancing quickly, technologically, and indeed, also in their operational capabilities and know-how. I personall support them, but I believe the days of "botnet hunting" their way are over since about 2000. Still, I've been wrong before, and I've never seen any better way of learning about botnets. > > Mike > _______________________________________________ > To report a botnet PRIVATELY please email: [EMAIL PROTECTED] > All list and server information are public and available to law enforcement > upon request. > http://www.whitestar.linuxbox.org/mailman/listinfo/botnets > _______________________________________________ To report a botnet PRIVATELY please email: [EMAIL PROTECTED] All list and server information are public and available to law enforcement upon request. http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
