Threat Level: green Handler on Duty: Yee Ching Tok

SANS ISC: Ghost of Christmas Botnets? SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Ghost of Christmas Botnets?
One of our handlers said that he saw a significant spike in botnet activity to known CCs yesterday.  That would make sense, considering the millions of new computers that joined the Internet soup on Christmas day, right out of the box, and likely a few months behind on patches.  However, when we looked at our favorite botnet tracking site, ShadowServer, we see that there was just the opposite - a bit DROP in botnets on Christmas Eve and very little rise on Christmas Day.  Very odd.

So, what are your sensors seeing?  A rise in botnet activity or a drop?  Send us your observations via our contact page.

Marcus H. Sachs
Director, SANS Internet Storm Center


301 Posts
ISC Handler
Dec 26th 2006

Sign Up for Free or Log In to start participating in the conversation!