[brlug-general] Botnet building?
eac at motion-labs.com
Thu Aug 18 14:26:00 CDT 2011
The .exe deliveries stopped today - well, back to the normal half dozen or so. This has been typical of previous "outbreaks" - we get flooded for a few days then it all goes quiet.
I would imagine that the 'bot herders attempt to recruit continuiosly - so perhaps they simply dole out a range of IP addresses to each agent 'bot for targetting and when that computer gets discovered and shutdown, the attacks agains my IP addresses cease?
Until the next time...
Don’t worry if it doesn’t work right. If everything did, you’d be out of a job. - Mosher’s Law of Software Engineering
> -----Original Message-----
> From: general-bounces at brlug.net
> [mailto:general-bounces at brlug.net] On Behalf Of Byron Como
> Sent: Thursday, August 18, 2011 11:20 AM
> To: general at brlug.net
> Subject: Re: [brlug-general] Botnet building?
> Is Anonymous getting ready for their November offensive?
> On 8/17/2011 3:55 PM, Edmund Cramp wrote:
> > Thanks Byron, so it's not just me.
> > Looking at the time stamps it all went quiet after midday
> but it had started up around 3am - so I'm guessing the net
> sending this out is based over the pond. When they took
> Rustock down the first thing I suspected was that my Internet
> connection had gone south on me!
> > I've added .xls to the "not permitted in" list recently to
> stop the asian speak fishing spam which has been popping up
> regularly for a while ever since we started selling into China.
> > We run Spamassasin and Kaspersky on everything coming in -
> Kaspersky is really a backup, SA does the heavy lifting.
> > Regards,
> > Edmund Cramp
> General mailing list
> General at brlug.net
More information about the General