Large botnet cause of recent Tor network overloadblog.fox-it.com79 points·by thursley·há 13 anos·16 comments
Critical analysis of Microsoft Operation B71 (Zeus Botnet disruption)blog.fox-it.com2 points·by thursley·há 14 anos·0 comments
thursley·há 2 anos·discussIn my experience this can be caused by a loadbalancer, for example not being able to route (properly) to servers in the pool or a difference in configuration/patch-level between them.
thursley·há 12 anos·discussSnort IDS rules to detect abuse can be found here: http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-liv...
thursley·há 13 anos·discussWriteup of the network monitoring service that discovered the infection: http://blog.fox-it.com/2013/02/21/writeup-on-nbc-com-distrib...
thursley·há 14 anos·discussThis was/is an infamous modem vulnerability: http://www.securityspace.com/smysecure/catid.html?id=10020It could force a modem to hangup and redial a number.
thursley·há 14 anos·discussMore technical details (pdf) on: http://www.crysys.hu/skywiper/skywiper.pdfAlthough the naming differs it has been noted on several blogs that it is the same malware.