FBI Arrests Three Botherders

June 16th, 2007 by phrozen77

With the arrest of three suspect botherders the FBI discovered botnets that consist of about a million infected machines worldwide. Amongst the charges for the three are spamming and infecting IT systems at hospitals.

The operation took place under the name “Operation Bot Roast”, which is an on-going operation to hunt down botnets and their owners.

Among the three men arrested is Robert Soloway from Seattle, a long time spam king. Another man, Downey, controlled his botnet consisting of Agobot infected machines from an IRC server and performed DDoS attacks.

Freenode and OFTC Networks Start Cooperation

May 23rd, 2007 by phrozen77

About half a decade ago Open and Free Technology Community (OFTC) separated from OpenProjects.net, founded by Rob ‘lilo” Levin, because of different opinions on fund raising and managing the project.

One year ago Rob Levin was hit by a car and died by the injuries. Freenode has since then made changes within its managing structure where users can have more influences in decision making and a more transparent organization in general.

This new cooperation between the two networks initially will be observing each others operations and swapping of of staff. What the future cooperation will be like, including a possible merger is not yet laid out. But both sides are interested in taking next steps.

DroneBL Going OpenSource

May 22nd, 2007 by phrozen77

DroneBL has gone opensource on the 15th of May. This blacklist for tracking infected machines started out as a research project by Nenolod and a friend back in 2003, and is especially suited to be used on IRC networks.

It was developed under a company both friends had in networking equipment and firmware, with main focus towards security. “In late 2004, NodeRebellion went out of business due to lack of interest. At this time, DroneBL was shutdown, and the codebase was transferred to myself personally”, Nenolod explained to IRC-Junkie.

Possible DoS Found in IRCd-Ratbox

May 15th, 2007 by phrozen77

A possible DoS has been found in IRCd-Ratbox. This IRCd is in use on EFNet and other smaller networks.

The discovery was announced on the Ratbox mailinglist by Lee H: “We have recently uncovered a potential DoS in ircd-ratbox that could result in resource starvation of the CPU.”

The bug dates back to very early version of Ratbox, which makes it a vulnerability that is presence in all flavors of the IRCd in use.

“We have now released ircd-ratbox-2.2.6, it is recommended that everybody upgrades — the attack is fairly easy to abuse.  Details follow in the next email”, Lee ends. Since then, Lee retracted to give more details about the exploit to prevent malicious users causing havoc.

Oslo* server Duo Delinks from Undernet

May 14th, 2007 by phrozen77

The 31st of May the Oslo* server duo from Undernet will be delinked. They served the Undernet community for many years, and its staff was active in different help related channels, with #nastrand being well known.

IRC-Junkie had a short interview with one of the admins of the server duo, Bjoern. Bjoern Vik, living in Oslo Norway, has been working in the IP business for about a decade and became involved with Undernet in 2002.