Collaborate Disseminate
UPDATE:
Looking at the product again, I don’t think this even has built in Wi-Fi (it uses bluetooth for the connection).
I don’t know what I am looking for here in Wireshark, but I added the host 192.168.40.59 and ran it for about 15 sec… Continue reading Smart Lightbulb Using Common IRC port found in NMAP – anything to worry about?
Last year marked the 30th anniversary of the Internet Relay Chat protocol (IRC) and it is hard to imagine that [Jarkko Oikarinen] could have foreseen the impact his invention would one day have on the world as we know it. How it would turn from a simple, decentralized real-time communication …read more
Drupalgeddon 2.0 vulnerability is being exploited again by attackers using a time-honored technique of Shellbot, or PerlBot. Continue reading New Drupalgeddon Attacks Enlist Shellbot to Open Backdoors
I published the following diary on isc.sans.org: “Malicious Network Traffic From /bin/bash“: One of our readers from Germany sent me a malicious shell script captured by our honeypot running on his Raspberry. It’s a simple UNIX Bash script that performs a bunch of malicious tasks: Kills existing crypto miner processes
[The post [SANS ISC] Malicious Network Traffic From /bin/bash has been first published on /dev/random]
Continue reading [SANS ISC] Malicious Network Traffic From /bin/bash
I want to run a P2P botnet in order to manipulate its traffic packets. I have chosen qbot on (https://github.com/geniosa/qbot) and I`m not sure is it P2P or IRC bot? I have found nothing about its properties on the net. Is t… Continue reading what is the architecture of qbot (IRC-P2P)? [on hold]
I registered a “foo” account on freenode irc server.
When I run
/whowas foo
I can see the last login of “foo” user and public IP. I want to remove that information and I have tried to connect/disconnect many times but all… Continue reading Remove irc whowas history
I published the following diary on isc.sans.org: “Windows IRC Bot in the Wild“: Last weekend, I caught on VirusTotal a trojan disguised as Windows IRC bot. It was detected thanks to my ‘psexec’ hunting rule which looks definitively an interesting keyword (see my previous diary). I detected the first occurrence
[The post [SANS ISC] Windows IRC Bot in the Wild has been first published on /dev/random]
I published the following diary on isc.sans.org: “CRIMEB4NK IRC Bot“: Yesterday, I got my hands on the source code of an IRC bot written in Perl. Yes, IRC (“Internet Relay Chat”) is still alive! If the chat protocol is less used today to handle communications between malware and their C2 servers, it
[The post [SANS ISC] CRIMEB4NK IRC Bot has been first published on /dev/random]
I’ve been going through this malware traffic analysis exercises and part of the malicious traffic detected is IRC traffic over non-standard port 443. This is picked up by ET Snort rule sid:2000348; rev:15
The content of the … Continue reading Packet analysis of IRC traffic
Internet Relay Chat beat Slack to real-time chat by decades and helped define much of our early online culture, yet way more people use Slack. Why is that? Continue reading Why Did Slack Win Out Over IRC, Anyway?