nanog mailing list archives
Re: short Botnet list and Cashing in on DoS
From: Gadi Evron <ge () linuxbox org>
Date: Thu, 07 Oct 2004 18:19:59 +0200
Going after the bots is lesser effort. The controllers are a priority.
That's not happening.AV companies are mostly interested in hyping the latest worm or semi-worm. Drone armies, hundreds of thousands large (no exaggeration) are just too much of an effort with 1000+ new Trojan horses coming out every month.
Also, there are virtually no resources directed at this problem except for a _few_ numbered concerned individuals from various corporate security teams and a few people who use IRC networks, world-wide.
As long as so many computers are out there for the taking, it is almost an impossible war.
Maybe it would be possible to check if any users from a location you are in-charge of are connecting to these IP's and sending them an automated email about their security plus a deal on an AV product (whatever it is worth for this)? I doubt many here have the time to even consider such an effort, even with the deal.
There are easier ways, such as seeing who in a said network connects out with recognized signatures.. again, I doubt many would bother.
Spam, viruses, it all revolves around the same problem. The users en-masse are a serious risk on the macro level. Besides, with so many drones around and infected machines - who needs a proxy to be anonymous?
Gadi Evron.
Current thread:
- short Botnet list and Cashing in on DoS J. Oquendo (Oct 06)
- Re: short Botnet list and Cashing in on DoS Gadi Evron (Oct 06)
- Re: short Botnet list and Cashing in on DoS Mike Tancsa (Oct 07)
- Re: short Botnet list and Cashing in on DoS Matthew S. Hallacy (Oct 08)
- <Possible follow-ups>
- Re: short Botnet list and Cashing in on DoS frank (Oct 07)
- Re: short Botnet list and Cashing in on DoS Alistair Cockeram (Oct 07)
- Re: short Botnet list and Cashing in on DoS Randy Bush (Oct 07)
- RE: short Botnet list and Cashing in on DoS Hannigan, Martin (Oct 07)
- Re: [nanog] RE: short Botnet list and Cashing in on DoS Dan Mahoney, System Admin (Oct 07)
- Re: short Botnet list and Cashing in on DoS Gadi Evron (Oct 07)
- Re: short Botnet list and Cashing in on DoS Paul Vixie (Oct 07)
- Re: short Botnet list and Cashing in on DoS Randy Bush (Oct 07)
- RE: short Botnet list and Cashing in on DoS Drew Weaver (Oct 08)
- Re: short Botnet list and Cashing in on DoS Matthew S. Hallacy (Oct 08)
- Re: short Botnet list and Cashing in on DoS Gadi Evron (Oct 08)
- Re: short Botnet list and Cashing in on DoS Matthew S. Hallacy (Oct 08)
- Re: short Botnet list and Cashing in on DoS Gadi Evron (Oct 08)
- Fixing stuff (was Re: short Botnet list and Cashing in on DoS) Sean Donelan (Oct 09)
- Re: Fixing stuff (was Re: short Botnet list and Cashing in on DoS) Stephen J. Wilcox (Oct 09)
- Re: Fixing stuff (was Re: short Botnet list and Cashing in on DoS) Mikael Abrahamsson (Oct 09)
- Re: short Botnet list and Cashing in on DoS Matthew S. Hallacy (Oct 08)