Security Incidents mailing list archives
Re: IRC-bots: what are they for ?
From: forlamp () NS NQUE COM (Ninja Information Systems.)
Date: Wed, 12 Jan 2000 14:57:51 -0600
Hi, there is a genre of kids that use irc called "packet monkeys", they are the ones who dont have much of a clue, but consider themseelves elite because they can "flood" people off networks, and prevent them from accessing things (such as irc, and irc channels). Now, the reason they install eggdrops and "packet tool networks" is to "hold" control of their "takeovers" that they execute on IRC. If you have a machine that's been penetrated and find eggdrop, it's probly advisable to look for rootkits and other pacekting tools that these kids use. They like to use big "botnets" to keep control of channels they takeover, to prevent others from taking it back, or from them. -fl On Wed, 12 Jan 2000, Jens Hektor wrote:
Hi, is anybody out there who could explain to me why on nearly every cracked machine I get in touch with the crackers have installed IRC-bots, most of the time "eggdrop" ? What practical use can taken by installing a bot on a cracked machine ? Does it give any backdoors to the system (file access, interactive access, monitoring, etc) ? Is such a bot possibly part of a larger communication infrastructure, maybe like the tfn/trinoo/stacheldraht thingie ? In hope for clarification, irc-ignorant Jens Hektor
Current thread:
- Re: Distributed Scanning?, (continued)
- Re: Distributed Scanning? Richard Bejtlich (Jan 08)
- Port 4 Arne Vidar Sjønøs (Jan 09)
- Re: Port 4 Keith Owens (Jan 10)
- Re: Port 4 Sean Sosik-Hamor (Jan 11)
- Re: Port 4 Philipp Buehler (Jan 11)
- Re: Port 4 Sean Sosik-Hamor (Jan 11)
- Re: Port 4 Boris Badenov (Jan 11)
- IRC-bots: what are they for ? Jens Hektor (Jan 12)
- Re: IRC-bots: what are they for ? Jon Paul, Nollmann (Jan 12)
- Re: IRC-bots: what are they for ? SecOrg (Jan 12)
- Re: IRC-bots: what are they for ? Ninja Information Systems. (Jan 12)
- Re: IRC-bots: what are they for ? Jens Hjalmarsson (Jan 12)
- Re: IRC-bots: what are they for ? tyler (Jan 12)
- Re: IRC-bots: what are they for ? David Brumley (Jan 12)
- Re: IRC-bots: what are they for ? The Undernet Bonk (Jan 12)
- Re: IRC-bots: what are they for ? Filip M. Gieszczykiewicz (Jan 12)
- Strange behaviour Belgarion of Riva (Jan 13)
- Re: Strange behaviour Richard Bejtlich (Jan 15)
- UDP probing [ trojan? ] mabrown () SECUREPIPE COM (Jan 17)
- Re: UDP probing [ trojan? ] Jose Nazario (Jan 18)
- Probe from UK Provider ? Duarte Cordeiro (Jan 18)