Posts Tagged ‘Botnets’

Beat Them at Their Own Game

Wednesday, April 16th, 2008

As a recent post also indicated, botnets are considered one of the main Internet security threats. Researchers from the Georgia Institute of Technology have proposed a new piece of software that can detect botnets, named BotSniffer.

It is hard to detect botnets, as they make use of existing protocols such as IRC in ways that it makes it hard to distinguish them from ‘normal’ users.

The researchers explain: “Our approach is based on the observation that, because of the pre-programmed activities related to C&C (command & control, ed.), bots within the same botnet will likely demonstrate spatial-temporal correlation and similarity.”

Majority of Junk Traffic Consists of DDoS Targetted at IRC Servers

Tuesday, April 8th, 2008

Security Service Provider Arbor Networks studied the amount of junk traffic over the total sum of Internet traffic, and found some remarkable figures when it comes to IRC traffic.

Over the past 1,5 year the company analyzed data of 70 ISP’s. The findings show that on average 4% of all traffic is junk, such as spam and DDoS attacks topping 1,5TB of data, per second.

Of this 4%, on average 1300 DDoS attacks daily makes halve of the junk traffic. But on occasions, DDoS can make 5% of the total Internet traffic. Of the monitored DDoS attacks the majority consists of TCP SYN floods and ICMP floods targeted to IRC servers.

IRC Network Admin: More Then You Bargained For

Monday, March 17th, 2008

Many people wish to have their own IRC network. Once a basic network is setup they advertise the network to gain users, in the hope many will find and start using it. But what if they abuse your good intentions and start using your infrastructure to host bots engaged in illegal activities? Then things can start to become a real life nightmare. In this article we follow Dewd, from network admin to a suspect criminal with a 10 year prison sentence hanging above his head.

Sentence Spam Convicted Maintains

Monday, March 3rd, 2008

The Virginia Supreme Court affirmed the sentence against the first convicted spammer in the USA, saying anti-spam laws do not violate freedom of speech.

Jeremy Jaynes of Raleigh, N.C was one of the world top spammers in 2003. The case he was convicted in was built on a single action where he produced 53,000 emails in 3 days in July 2003. He was sentenced to 9 years in jail.

Jaynes said in his defense that his spamming actions do not fall under anti-spam legislation because of freedom of speech guaranteed under the First Amendment.

Hackers Declare War to Scientology

Sunday, February 3rd, 2008

A group of hackers, who go by the name of “Anonymous” and use IRC as their base, declared war against Scientology. The group has released texts online which Scientology members normally have to pay for. Also DDoS attacks on the 18th of January rendered the church’s website unusable.

The attacks followed after Scientology tried to censor a mockup movie picturing Tom Cruise, one of the most known members of the church. In the movie the actor laughs hysterically and makes claims Scientology members are the only people able to save life’s after car accidents.