funsec mailing list archives

Re: Botnet pioneer is only 19??!!!


From: David Watson <david () honeynet org uk>
Date: Tue, 01 Jul 2008 19:35:56 +0100

Dave Dittrich wrote:
Randy wrote:
Dave
thanks. interesting that you mention it isn't Fast-Flux because the
article of course builds as a almost stepping stone or father of the
new fast-flux concept. So did another website.
http://www.heise-online.co.uk/security/Fast-flux-trojan-author-cops-plea-bargain--/news/111024 


Correct. Nugache has nothing to do with Fast-Flux, other than it
uses P2P as its C&C mechanism *instead of* using Fast-Flux to hide
the central C&C servers, as Storm does. It was just a misunderstanding.
I think a correction to the original article will be showing up soon.

Original Register story now corrected:

http://www.theregister.co.uk/2008/06/28/nugache_creator_plea_agreement/

Thanks,

David

-- 
David Watson
UK Honeynet Project
www.ukhoneynet.org
david () honeynet org uk

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: