Oh Yeah, botnet communications

[T Biehn <tbiehn () gmail com>]

You know how the current amateur botnet offerings are basing domain lists
off the current time to allow the 'good guys' to prepare?

Why not base the seed off something like a news RSS feed? I asked some
whitehats when I was ruined in Washington DC and they couldn't tell me.

News isn't predictable but is globally shared on a given day.

-Travis

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/