Internet Storm Center
Sign In
Sign Up
SANS Network Security: Las Vegas Sept 4-9.
Handler on Duty:
Didier Stevens
Threat Level:
green
Date
Author
Title
FBI MARIPOSA BOTNET ARRESTS
2010-07-29
Rob VandenBrink
FBI, Slovenian and Spanish Police announce more arrests of Mariposa Botnet Creator, Operators
FBI
2024-07-31/a>
Johannes Ullrich
Increased Activity Against Apache OFBiz CVE-2024-32113
2022-03-15/a>
Xavier Mertens
Clean Binaries with Suspicious Behaviour
2021-11-14/a>
Didier Stevens
External Email System FBI Compromised: Sending Out Fake Warnings
2020-03-31/a>
Johannes Ullrich
Kwampirs Targeted Attacks Involving Healthcare Sector
2012-09-10/a>
donald smith
Blue Toad publishing co compromise lead to UDID release. http://redtape.nbcnews.com/_news/2012/09/10/13781440-exclusive-the-real-source-of-apple-device-ids-leaked-by-anonymous-last-week?lite
2012-02-20/a>
Rick Wanner
DNSChanger resolver shutdown deadline is March 8th
2011-11-11/a>
Rick Wanner
What's up with fbi.gov DNS?
2010-12-15/a>
Johannes Ullrich
OpenBSD IPSec "Backdoor"
2010-07-29/a>
Rob VandenBrink
FBI, Slovenian and Spanish Police announce more arrests of Mariposa Botnet Creator, Operators
MARIPOSA
2010-07-29/a>
Rob VandenBrink
FBI, Slovenian and Spanish Police announce more arrests of Mariposa Botnet Creator, Operators
BOTNET
2024-02-18/a>
Guy Bruneau
Mirai-Mirai On The Wall... [Guest Diary]
2024-01-07/a>
Guy Bruneau
Suspicious Prometei Botnet Activity
2023-12-27/a>
Guy Bruneau
Unveiling the Mirai: Insights into Recent DShield Honeypot Activity [Guest Diary]
2023-11-27/a>
Guy Bruneau
Decoding the Patterns: Analyzing DShield Honeypot Activity [Guest Diary]
2023-11-22/a>
Guy Bruneau
CVE-2023-1389: A New Means to Expand Botnets
2023-11-09/a>
Guy Bruneau
Routers Targeted for Gafgyt Botnet [Guest Diary]
2023-03-11/a>
Xavier Mertens
Overview of a Mirai Payload Generator
2022-02-15/a>
Xavier Mertens
Who Are Those Bots?
2021-11-26/a>
Guy Bruneau
Searching for Exposed ASUS Routers Vulnerable to CVE-2021-20090
2021-10-04/a>
Johannes Ullrich
Boutique "Dark" Botnet Hunting for Crumbs
2020-06-13/a>
Guy Bruneau
Mirai Botnet Activity
2019-08-14/a>
Brad Duncan
Recent example of MedusaHTTP malware
2019-07-26/a>
Kevin Shortt
DVRIP Port 34567 - Uptick
2018-12-23/a>
Guy Bruneau
Scanning Activity, end Goal is to add Hosts to Mirai Botnet
2017-05-08/a>
Renato Marinho
Exploring a P2P Transient Botnet - From Discovery to Enumeration
2016-12-07/a>
Xavier Mertens
The Passwords You Should Never Use
2016-09-10/a>
Xavier Mertens
Ongoing IMAP Scan, Anyone Else?
2016-07-27/a>
Xavier Mertens
Analyze of a Linux botnet client source code
2014-10-09/a>
Johannes Ullrich
CSAM: My servers started speaking IRC, and that is when I started to listen!
2014-01-16/a>
Kevin Shortt
Port 4028 - Interesting Activity
2013-12-07/a>
Guy Bruneau
Suspected Active Rovnix Botnet Controller
2011-02-28/a>
Deborah Hale
Possible Botnet Scanning
2011-01-11/a>
Kevin Shortt
Spam Cannons on Holiday
2010-07-29/a>
Rob VandenBrink
FBI, Slovenian and Spanish Police announce more arrests of Mariposa Botnet Creator, Operators
2010-04-23/a>
Adrien de Beaupre
Shadowserver botnet rules
2009-12-21/a>
Marcus Sachs
iPhone Botnet Analysis
2009-11-13/a>
Deborah Hale
Pushdo/Cutwail Spambot - A Little Known BIG Problem
2009-11-08/a>
Kevin Liston
FireEye takes on Ozdok and Recovery Ideas
2009-10-10/a>
Tony Carothers
User Notification for Possible Infected Systems
2009-09-16/a>
Raul Siles
IETF Draft for Remediation of Bots in ISP Networks
2009-05-07/a>
Deborah Hale
Botnet hijacking reveals 70GB of stolen data
2008-09-01/a>
John Bambenek
The Number of Machines Controlled by Botnets Has Jumped 4x in Last 3 Months
2008-07-19/a>
William Salusky
A twist in fluxnet operations. Enter Hydraflux
2008-07-15/a>
Maarten Van Horenbeeck
Bot controller mimicry
2008-04-07/a>
John Bambenek
Got Kraken?
2008-04-07/a>
John Bambenek
Kraken Technical Details: UPDATED x3
2006-08-31/a>
Swa Frantzen
NT botnet submitted
2006-08-31/a>
Joel Esler
MS06-040 Worm
ARRESTS
2010-07-29/a>
Rob VandenBrink
FBI, Slovenian and Spanish Police announce more arrests of Mariposa Botnet Creator, Operators
Homepage
Diaries
Podcasts
Jobs
Data
TCP/UDP Port Activity
Port Trends
SSH/Telnet Scanning Activity
Weblogs
Threat Feeds Activity
Threat Feeds Map
Useful InfoSec Links
Presentations & Papers
Research Papers
API
Tools
DShield Sensor
DNS Looking Glass
Honeypot (RPi/AWS)
InfoSec Glossary
Contact Us
Contact Us
About Us
Handlers
About Us
Slack Channel
Mastodon
Bluesky
X
Learn
about the Internet Storm Center
and our
volunteer InfoSec handlers