< Low-Interaction Honeyclient | Nepenthes 0.2 >

Fun With Botnets

Sometimes it is funny to observer botnets since the controllers are pretty creative in what they do. One example:
08:59 <@F00b4r> .download http://www.example.org/fbi.txt c:\fbi.txt 1

09:00 <@F00b4r> .open www.fbi.gov

The text file contains the follow text:
Greetings,

This is fbi, we are investigating your computer, please dont touch the computer

for the next 5minutes, thanks.

I'm wondering how the victims react once such a text pops up and simultaneously the web site of the FBI opens in their browser...
This entry was posted by Thorsten Holz on Friday, November 10. 2006 at 13:09. and is filed under honeynets. You can leave a response, or trackback from your own blog. All new comments are subject to moderation before being displayed.

Trackbacks

Trackback specific URI for this entry
  1. Controladores de botnets creativos

    Una anécdota divertida, que he podido ver en Honeyblog hace un ratito. Uno de los muchos controladores de botnets ha establecido el siguiente procedimiento para las máquinas zombies de su red: 08:59 < @F00b4r> .download http://www.example.org/fbi.txt ...

    Weblog: Sergio Hernando
    Tracked: Nov 12, 23:19

Comments

Display comments as (Linear | Threaded)

    No comments


Add Comment


Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
E-Mail addresses will not be displayed and will only be used for E-Mail notifications

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA
 
Submitted comments will be subject to moderation before being displayed.