[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] Mirai Botnet Relocates To Onions



How we can protect themselves?
--------------------------------------------
On Sun, 12/18/16, Flipchan <flipchan@xxxxxxxxxx> wrote:

 Subject: Re: [tor-talk] Mirai Botnet Relocates To Onions
 To: tor-talk@xxxxxxxxxxxxxxxxxxxx
 Date: Sunday, December 18, 2016, 9:24 AM
 
 There is alot of botnets that run
 over Tor , there is alot of assholes. 
 
 But if You can identify THE malware You can pretty easy find
 the source code and then THE default cred to shut it down. 
 
 grarpamp <grarpamp@xxxxxxxxx>
 skrev: (18 december 2016 06:11:17 CET)
 >https://www.bleepingcomputer.com/news/security/security-firms-almost-brought-down-massive-mirai-botnet/
 >
 >"Following a failed takedown attempt, changes made to
 the Mirai
 >malware variant responsible for building one of today's
 biggest
 >botnets of IoT devices will make it incredibly harder
 for authorities
 >and security firms to shut it down," reports Bleeping
 Computer.
 >Level3 and others" have been very close to taking down
 one of the
 >biggest Mirai botnets around, the same one that
 attempted to knock the
 >Internet offline in Liberia, and also hijacked 900,000
 routers from
 >German ISP Deutsche Telekom.The botnet narrowly escaped
 due to the
 >fact that its maintainer, a hacker known as BestBuy, had
 implemented a
 >domain-generation algorithm to generate random domain
 names where he
 >hosted his servers.
 >Currently, to avoid further takedown attempts from
 similar security
 >firms, BestBuy has started moving the botnet's command
 and control
 >servers to Tor. "It's all good now. We don't need to pay
 thousands to
 >ISPs and hosting. All we need is one strong server," the
 hacker said.
 >"Try to shut down .onion 'domains' over Tor," he
 boasted, knowing that
 >nobody can.
 >-- 
 >tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
 >To unsubscribe or change other settings go to
 >https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
 
 -- 
 Sincerly flipchan - LayerProx dev
 -- 
 tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
 To unsubscribe or change other settings go to
 https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
 
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk