Re: Why attacker install irc after hacking?

[jacco () indekroeg nl]

They  use public IRC channels to hide there identety.
Infected machine connects to IRC channel to listen for commands.
The attacker joins the IRC channel to send commands to a infected machine or to all the infected machines at once.

When someone wants to findout who hacked him he will endup in a IRC channel full of people chatting and he will not 
know who is controling the botnet

That is why :P

Greetingz,
jacco




-------------------------------------------------------------------------
This List Sponsored by: Webroot

Don't leave your confidential company and customer records un-protected. 
Try Webroot's Spy Sweeper Enterprise(TM) for 30 days for FREE with no 
obligation. See why so many companies trust Spy Sweeper Enterprise to 
eradicate spyware from their networks.
FREE 30-Day Trial of Spy Sweeper Enterprise

http://www.webroot.com/forms/enterprise_lead.php
--------------------------------------------------------------------------