Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: Oh Yeah, botnet communications
From: "Elazar Broad" <elazar () hushmail com>
Date: Thu, 19 Feb 2009 23:46:39 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

"You know how the current amateur botnet offerings are basing
domain lists off the current time to allow the 'good guys' to
prepare?"

Shhh, your gonna wake the "<insert A/V company here> writes all the
malware" theorists...


On Thu, 19 Feb 2009 23:13:38 -0500 T Biehn <tbiehn () gmail com> wrote:
You know how the current amateur botnet offerings are basing
domain lists
off the current time to allow the 'good guys' to prepare?

Why not base the seed off something like a news RSS feed? I asked
some
whitehats when I was ruined in Washington DC and they couldn't
tell me.

News isn't predictable but is globally shared on a given day.

-Travis
-----BEGIN PGP SIGNATURE-----
Charset: UTF8
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 3.0

wpwEAQECAAYFAkmeNYoACgkQi04xwClgpZhjdAP/Uz4IUuJPRrNJbbuZW5zaSllvBUZM
I0MSZCD3KYViEWbDSzBWIYBY67DHTl2SAz5n91aG3Xswd+AYj//9uMVPSBg0OJ/DcXX1
FItea1gc6PPeNMLWAXMrLcbP2wCwzDlrzjzU4TRmUGUXQBSWq9E/RccqI2QvzpqvvBKu
Nfr1JeA=
=0Rjf
-----END PGP SIGNATURE-----

--
Earn your medical billing and coding degree, 100% online! Enroll now.
 http://tagline.hushmail.com/fc/BLSrjkqfMmgJRBfXoys7dlGxe42aOzYO2gb37Tz3VOR2i51BEqQXYN67V8X/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault