[Operators] Let's start some witch-hunt

naw lambda512 at gmail.com
Tue Jun 15 18:14:58 CDT 2010


On Miércoles 16 Junio 2010 01:00:07 Martin Sebald escribió:
> Hello viq!
> 
> >> Maybe I'm stating the obvious here, but this really sounds like a
> >> virus-originated botnet using XMPP as the control channel.
> > I am thinking it would be interesting to see some of the content they are
> > sending. I wonder if it would be feasible to set up a 'honeypot' server
> > for them, just for the purpose of observing the traffic and what they are
> > doing - maybe that would let figure out in more details what it is and
> > what it does, maybe even it's origin.
> 
> The thing is how to make this honeypot server a target.
> 

Allow me to point out that the people behind these "attacks" may be monitoring this mail list, so this may not be the proper place to discuss it.


More information about the Operators mailing list