Re: latest on botnets
On Sat, 18 Feb 2006, Hugo Vanwoerkom wrote:
> http://blog.washingtonpost.com/securityfix/
> has some unbelievable numbers: the average botnet (network of
> compromised PC's) has 36,8000 members!
>
> None of these can be Debian boxes running chkroot regularly, right?
no ...
chkroot will try to find cracked machines .. it does not prevent it
i keep wondering, if one was successful in breaking in, why
change the files so that things like chkroot will find you,
if the cracker left it alone, they can still get in and probably
not be detected
> They are all M$ boxes.
not necessarily
> Is that a believable number?
no ... i'd multiply it by 10x or 100x more or even 1000x because
not everybody will let the world know they've been broken into
and not everybody will know that they've been cracked either
banks ( in usa ) are required to notify customers that the credit card
and id is at risk, but that doesn't mean they will tell the "world"
last customer didn't know they've been cracked and keep running
for 2 months .. they thought somethng was wrong when it didn't boot
again, 2 months after the fact ... ie... 2 months of sniffing
time for the cracker
c ya
alvin
Reply to: