Thursday, December 18, 2008

Case-Study of Malware drop servers

Hey,

Here's a document I've just read.

As for me, only the "result" part is worth reading.

Anyway, this is just another study where computer security researchers are playing with the black/white hat barrier. What will happen when the drop server will be a compromised machine from a botnet, without any open directory, and belonging to Mr. John Doe ?

Will they hack it too ?

Probably.

Tuesday, December 09, 2008

New SSH bruteforce attacks ?

This is actually a shitty title, because it is *NOTHING NEW*.

I see some people around yelling like looserz : "oh my goooooooood the bad guys are now using different IPs when trying to bruteforce some SSH server !"

Can you tell me, what is new in this ? Hell, botnets have been used for years already, for any kind of purposes : DDoS, malware propagation, spam, phishing, even distributed calculating, so WHY THE FUCK wouldn't it be used for something as TRIVIAL as SSH bruteforcing ?

Sometimes security researchers are making me laugh out loud. (Strange to see a "lol" written down, ain't it ?)

Link here some of the crap.