keylogger bots on #!!edu2k4

[REN-ISAC <dodpears () INDIANA EDU>]

Dear security@educause,

IU IT Security Office engineers discovered a keylogger bot herd on a public IRC server, channel #!!edu2k4. The channel 
has been shutdown two times on different IRC networks. The channel is expected to resurface on another server. If you 
have the capability, you may wish to monitor local network traffic for #!!edu2k4, and clean identified clients. 
REN-ISAC was given a list of ~50 botted machines, we'll be directly contacting those sites.

Regards,

Doug Pearson
Research and Education Networking ISAC
http://www.ren-isac.net
+1(812)855-3846
+1(812)325-3846 cell

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.