nanog mailing list archives

IRC bots...


From: "Fergie (Paul Ferguson)" <fergdawg () netzero net>
Date: Sat, 12 Mar 2005 18:25:21 GMT



Somewhat related to operational issues...

It was interesting to read the "daily handler" log at
the ISC which related their experiences with detecting
(and disabling/disinfecting) a machine/network infected
with several IRCbot drone computers. As someone who has
had to deal with with this issue on several customer
networks, it is sometimes intriguing at the length at
which some of the developers of these damned things
go through to accomplish their feats.  :-)

http://isc.sans.org/diary.php?date=2005-03-10

- ferg

--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg () netzero net or
 fergdawg () sbcglobal net


Current thread: