To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
----------
---------- Forwarded Message ----------
Subject: [Full-disclosure] Devil Linux 1.2.10 has an IRC bot onboard
Date: Thursday 19 October 2006 11:13
From: Victor Grishchenko <[EMAIL PROTECTED]>
To: [email protected]
Hi!
While building and testing a customized version of DevilLinux router
distro I found an IRC bot onboard. As far as I understood, it was
EnergyMech compiled from source right there plus some executable named
"TODO" (for camouflage purposes). The stuff unfolds at /shm/sshd/ and
runs somehow. Sadly, I had no time for detailed investigation. It leaves
an overall impression of script kiddie's work.
Last days DevilLinux website seems to be dead.
Victor Grishchenko
Digital Channels Network
Yekaterinburg, Russia
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
-------------------------------------------------------
_______________________________________________
To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
All list and server information are public and available to law enforcement
upon request.
http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
