funsec mailing list archives

Re: Spam King arrested


From: "Åke Nordin" <polymorpevz () gmail com>
Date: Fri, 1 Jun 2007 20:47:13 +0200

On 6/1/07, Steve Manzuik <smanzuik () juniper net> wrote:
> Anybody know if the malware Soloway used to build his spambot networks
> is subject to fairly easy takeover by somebody else?

Not sure but if a copy of the malware is available it wouldn't be too
hard for one to take a peek and figure out how to gain control of the
botnet.

The least of the problems involved with that scenario are probably
the technological ones. I assume one puts h{im|er}self in a rather
delicate legal position in most western countries if one would hijack
such a botnet (and thus implicitly the systems under it's control),
since there would be a rather high probability that a few of the
affected systems were owned and/or operated by legal bodies in
the same jurisdiction. I reckon only LEAs operating under unusually
permissive legal restrictions would have any chance to get away with it.

--
Åke Nordin Unix/net geek, Netia.se consultant, Stacken member.
Damian Conway: "The programmer is fighting against the two most
destructive forces in the universe: entropy and human stupidity."

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: