Re: Botnet pioneer is only 19??!!!

[Dave Dittrich <dittrich () u washington edu>]

Randy wrote:
> Dave
> thanks. interesting that you mention it isn't Fast-Flux because the
> article of course builds as a almost stepping stone or father of the
> new fast-flux concept. So did another website.
> http://www.heise-online.co.uk/security/Fast-flux-trojan-author-cops-plea-bargain--/news/111024

Correct. Nugache has nothing to do with Fast-Flux, other than it
uses P2P as its C&C mechanism *instead of* using Fast-Flux to hide
the central C&C servers, as Storm does. It was just a misunderstanding.
I think a correction to the original article will be showing up soon.

-- 
Dave Dittrich
dittrich () u washington edu
http://staff.washington.edu/dittrich

PGP key      http://staff.washington.edu/dittrich/pgpkey.txt
Fingerprint  FE97 0C57 0843 F3EB 49A1  0CD0 8E0C D0BE C838 CCB5
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.