Re: Did some botnet lose its C&C mechanism?

[Paul Ferguson <fergdawgster () gmail com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, Aug 3, 2009 at 4:41 AM, Rich Kulawiec <rsk () gsp org> wrote:

> Multiple people report, via public and private channels, a noticeable
> drop (60-80%) in bot-sourced spam attempts over the last 72 hours.
> Some of my sensors have observed the same, others haven't, and still
> others give mixed indications.  But there are sufficient observations
> to indicate that *something* curious has happened.

We (Trend Micro) haven't noticed a drop, and SpamCop doesn't show it
either:

http://www.spamcop.net/spamgraph.shtml?spamweek

...although I do see that Ironport/SenderBase shows a slight dip:

http://www.senderbase.org/home/detail_spam_volume

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.5.3 (Build 5003)

wj8DBQFKdx3lq1pz9mNUZTMRAtqhAJ9yLqRbs/yGwfAsEQpt+D3ppSccvgCeIPva
xDD7bF4b/fEA8zEWvOZY5yI=
=CsY+
-----END PGP SIGNATURE-----




--
"Fergie", a.k.a. Paul Ferguson
Engineering Architecture for the Internet
fergdawgster(at)gmail.com
ferg's tech blog: http://fergdawg.blogspot.com/
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.