Comments on: Nirbot’s Latest Move: MS DNS Exploits

By: Nirbot Neutered? · Security to the Core | Arbor Networks Security Blog

Nirbot Neutered? · Security to the Core | Arbor Networks Security Blog — Mon, 23 Apr 2007 14:53:15 +0000

[...] Nirbot – Even Botters Need AttentionNirbot’s Latest Move: MS DNS Exploits [...]

By: Nirbot actively exploiting the DNS RPC vulnerability at Security Samizdat

Nirbot actively exploiting the DNS RPC vulnerability at Security Samizdat — Tue, 17 Apr 2007 19:50:05 +0000

[...] According to Arbor Networks: The latest turn in the Nirbot saga is that they’ve gone and incorporated the MS Windows DNS RPC interface exploit into their bot. We started seeing this in ATLAS starting Sunday evening GMT and it appears that this flood of MS DNS RPC exploits was seeded into an existing botnet. It appears that one of the public exploits was rolled into the bot over the weekend. [...]

By: www.andrewhay.ca » Suggested Blog Reading - Tuesday April 17th, 2007

www.andrewhay.ca » Suggested Blog Reading - Tuesday April 17th, 2007 — Tue, 17 Apr 2007 15:47:40 +0000

[...] Nirbot’s Latest Move: MS DNS Exploits The latest turn in the Nirbot saga is that they’ve gone and incorporated the MS Windows DNS RPC interface exploit into their bot. We started seeing this in ATLAS starting Sunday evening GMT and it appears that this flood of MS DNS RPC exploits was seeded into an existing botnet. It appears that one of the public exploits was rolled into the bot over the weekend. [...]