Security Incidents mailing list archives

Re: hacked server, DDoS bin installed


From: Andrew Sledge <asledge () gpc edu>
Date: Wed, 07 Dec 2005 10:35:16 -0500

Typically, you should contact your local FBI office - they can be found in the white pages. Take the machine offline and do nothing with it. If you tamper with it, the forensics results may be skewed and any defense lawyer will use that fact to their advantage. Also make sure you document EVERYTHING you have done since encountering the exploit.

naptime () gmail com wrote:
a customers server got hacked.. binary in tact, seems like they were DDoSing.. strings brings up the irc server, 
channel name, key.. where is the fbi address where i can send this information to?

thanks

-Sledge


Current thread: