bugtraq - Re: [funsec] Re: [Full-disclosure] A Botted Fortune 500 a Day

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <20070417.162931.19739.2831111@webmail40.lax.untd.com>
Date: Tue, 17 Apr 2007 23:28:39 GMT
From: "Fergie" <fergdawg@...zero.net>
To: nick@...us-l.demon.co.uk
Cc: botnets@...testar.linuxbox.org, funsec@...uxbox.org,
	full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com
Subject: Re: [funsec] Re: [Full-disclosure] A Botted Fortune 500 a Day

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -- Nick FitzGerald <nick@...us-l.demon.co.uk> wrote:

>Steven Adair wrote:
>
>> Also, as a side note, I would like to add that just because SPAM is
>> coming from a certain gateway does not necessarily mean that the
>> machines on
>> their network are infected.  ...
>
>Did you read any of their reports fully?
>
>They don't assume that.  They track the mail back "behind" the gateways 
and they know what forms of what spam are being sent through bot-nets 
because of other systems they run (honeypots, etc) and analysis they 
perform.
>

Indeed.

Also, our (Trend Micro) analysis shows that virtually all spam
these days is being sent by spambots.

The guys at Support Intelligence (Rick and Adam)have done their
homework.

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.1 (Build 1012)

wj8DBQFGJVgcq1pz9mNUZTMRAjFHAKDenx2XP0pPphqwsUW9XymjQ7RU1ACghncX
mqzhB1nidD8GjCoMbSkF27s=
=zjJf
-----END PGP SIGNATURE-----


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/