Irregular Expressions » botnet

News news news

Dan O'Connor — Wed, 25 Jan 2012 05:40:34 +0000

Found a few things going on that got me fired up.

Megaupload head cheese has been denied bail, they assert that he is a flight risk.

http://www.bbc.co.uk/news/world-asia-16711416

I am totally on the fence on this one, I have seen a lot of legitimate material hosted on there. The other material I have seen on there is peoples personal stuff, I really have not looked very hard on there of copy righted stuff and what I did look for was already down. Which fits in with their story / policy of removing it.

I will be following this, I really want to see where all of the figures came from.

Another story is the MS security team has named a bot net creator that looks to have had a previous life at a AV company.

http://www.bbc.co.uk/news/technology-16700192

Another one to follow.

Finding FastFlux Botnet

Dan O'Connor — Thu, 31 Mar 2011 03:15:39 +0000

Very cool way of locating fastflux botnets.

http://www.ece.tamu.edu/~reddy/papers/imc2010-yadav.pdf

I’m still reading it, but it’s very interesting.

Anti-Zombie Bill

Dan O'Connor — Thu, 31 Mar 2011 03:02:49 +0000

http://www.zdnet.com/blog/security/zombie-pc-prevention-bill-to-make-security-software-mandatory/8487

I wonder if this will catch on?

I don’t think this will stop everything but it can’t hurt. You will still get infected, but at least there is something there.

The 2011 Security Story

Dan O'Connor — Wed, 30 Mar 2011 04:49:06 +0000

Well maybe not the 2011 story, but I am pretty sure the next big thing will be mobile devices such as phones and tablets. There is lots of users that will cross personal devices with business devices, would you allow a laptop or pc in to your environment like that?

The other question is what you would do with an army of cell phones at your command?

Spam? I doubt that.

What is everyone doing now, or trying to push now with mobile devices that you would want to get behind?

Mobile banking, I think this provides a real bang for your buck if you are going to take over thousands of cell phones. Using a SMS command and control or even using twitter or other web sites to send your commands out. You cold also use those channels to push back the information you are gathering.

Very cool command and control

Dan O'Connor — Sun, 27 Mar 2011 04:47:59 +0000

I do find command and control structures of botnets very interesting, I do find the creativity of them incredible.

http://www.bbc.co.uk/news/technology-12859591

This is one I have not seen before, using custom encryption and using message board comments as a means of communication. Depending on the message board I don’t know if this is a great way of distributing commands to the bot members. If the message got deleted you could have something go wrong, such as an update. They do get good marks for the custom encryption, I don’t know if I would have selected the command control structure.