Archive for March, 2007

Nirbot – Even Botters Need Attention

March 7, 2007 by Jose Nazario

A new bot has been making the rounds this winter and has been dubbed “Nirbot”, “Rinbot”, “Vanbot”, or “IrnBot” depending on the AV vendor. This is one of the first new IRC bot codebases to emerge in the past few years, but like many other Windows bots it’s written in C++. Unlike Spybot, Agobot, or [...]

Read More

Botnet C&C Quandry: Infiltrate or Extirpate?

March 5, 2007 by Danny McPherson

Well, after discussions at the NANOG 39 ISP Security BOF and a few other similar forums, as promised, I’ve finally found a few minutes to follow-up on this. From my previous post on this topic: Much random discussion takes place about whether botnet C&C infrastructure should be immediately taken offline or should be infiltrated in [...]

Read More

Market Updates

March 4, 2007 by Jose Nazario

About a week ago I created a market on Inklink Markets, a website that enables you to participate in predictive markets. The idea of such markets is that crowd wisdom will yield a correct answer, and when we (as the crowd) “buy” positions in the market (effectively betting one way or another) we’ll reveal the [...]

Read More