Re: Why attacker install irc after hacking?

["Mario Platt" <mplatt () gmail com>]

That is typical script kiddie stuff. They probably got an exploit
anywhere, and go on to irc tell their friends they're so good......
but it could also be botnet's

On 4/20/06, James Harless <jharless () kidwellcompanies com> wrote:
> I believe that a large percentage of botnets are controlled through commands
> given over IRC.
>
>
> --
> James Harless
> Network Security Engineer
>
> Kidwell Companies
> kCOM  kE  kTECH
>
>
>
> On 4/19/06 11:55 PM, "Monty Ree" <chulmin2 () hotmail com> wrote:
>
> > Hello, all.
> >
> > I have operated linux server for a long time.
> > and I have found that some irc(psybnc etc) related program was installed
> > after scan or hacking.
> >
> > I can't understand
> > Why attackers installed and executed irc program?
> > Why attackers use irc after hacking?
> > Just chatting is not...I guess..
> >
> >
> > Thanks in advance.
> >
> > _________________________________________________________________
> > 전세계인이 함께하는 웹 메일 서비스인 MSN Hotmail을 만나 보세요.
> > http://loginnet.passport.com/login.srf?id=2&svc=mail&cbid=24325&msppjph=1&lc=1
> > 042
> >
> >
> >
> > -------------------------------------------------------------------------
> > This List Sponsored by: Webroot
> >
> > Don't leave your confidential company and customer records un-protected.
> > Try Webroot's Spy Sweeper Enterprise(TM) for 30 days for FREE with no
> > obligation. See why so many companies trust Spy Sweeper Enterprise to
> > eradicate spyware from their networks.
> > FREE 30-Day Trial of Spy Sweeper Enterprise
> >
> > http://www.webroot.com/forms/enterprise_lead.php
> > --------------------------------------------------------------------------
>
>
> -------------------------------------------------------------------------
> This List Sponsored by: Webroot
>
> Don't leave your confidential company and customer records un-protected.
> Try Webroot's Spy Sweeper Enterprise(TM) for 30 days for FREE with no
> obligation. See why so many companies trust Spy Sweeper Enterprise to
> eradicate spyware from their networks.
> FREE 30-Day Trial of Spy Sweeper Enterprise
>
> http://www.webroot.com/forms/enterprise_lead.php
> --------------------------------------------------------------------------