funsec mailing list archives
Re: Did some botnet lose its C&C mechanism?
From: Paul Ferguson <fergdawgster () gmail com>
Date: Mon, 3 Aug 2009 10:27:08 -0700
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Mon, Aug 3, 2009 at 4:41 AM, Rich Kulawiec <rsk () gsp org> wrote:
Multiple people report, via public and private channels, a noticeable drop (60-80%) in bot-sourced spam attempts over the last 72 hours. Some of my sensors have observed the same, others haven't, and still others give mixed indications. But there are sufficient observations to indicate that *something* curious has happened.
We (Trend Micro) haven't noticed a drop, and SpamCop doesn't show it either: http://www.spamcop.net/spamgraph.shtml?spamweek ...although I do see that Ironport/SenderBase shows a slight dip: http://www.senderbase.org/home/detail_spam_volume - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.5.3 (Build 5003) wj8DBQFKdx3lq1pz9mNUZTMRAtqhAJ9yLqRbs/yGwfAsEQpt+D3ppSccvgCeIPva xDD7bF4b/fEA8zEWvOZY5yI= =CsY+ -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/ _______________________________________________ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.
Current thread:
- Did some botnet lose its C&C mechanism? Rich Kulawiec (Aug 03)
- Re: Did some botnet lose its C&C mechanism? Paul Ferguson (Aug 03)
- Re: Did some botnet lose its C&C mechanism? Rich Kulawiec (Aug 04)
- Re: Did some botnet lose its C&C mechanism? Paul Ferguson (Aug 03)