To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ----------
|
I just got a copy of this chat log from an anonymous source... Some of you might enjoy it. I've split up the converstaion so its easily readable, and {removed} some traffic that shouldn't be pasted here. :[EMAIL PROTECTED] JOIN :#sc :indeed.boobs.net 332 kevin2 #sc :.aim Should I put these pictures of us on myspace or facebook? <A HREF=""> :indeed.boobs.net 333 kevin2 #sc s1 1141492671 :indeed.boobs.net 353 kevin2 @ #sc :kevin2 @s1 :indeed.boobs.net 366 kevin2 #sc :End of /NAMES list. privmsg #sc hi kevin privmsg #sc --- see you're moving around again privmsg #sc gotta love those idiots who keep clicking aim links and giving you away. privmsg #sc I know your around.... dont wanna talk? privmsg #sc look at all those transfers... how many edu's you got now? 200? privmsg #sc its amazing how many edu's you get... college kids are just dumb huh privmsg #sc herm... wake up! privmsg #sc i wonder which edu you'll take over next... one of these that i'm seeing fly by no doubt. :[EMAIL PROTECTED] PRIVMSG kevin2 :who are you privmsg #sc i'm someone who's been watching you for awhile. :indeed.boobs.net 404 kevin2 #sc :You must have a registered nick (+r) to talk on this channel (#sc) :[EMAIL PROTECTED] KICK #sc kevin2 :first you speak, then you talk there privmsg s1 hi!! you do wanna talk! :[EMAIL PROTECTED] PRIVMSG kevin2 :hmm.. privmsg s1 i've been watching you for awhile. :[EMAIL PROTECTED] PRIVMSG kevin2 :why are you such im a nervious mode? privmsg s1 i've been monitoring you for awhile... ever since you were on {omg} :[EMAIL PROTECTED] PRIVMSG kevin2 :I'm testing out something I coded, no harm caused :[EMAIL PROTECTED] PRIVMSG kevin2 :these drones will be removed once im finished privmsg s1 bullshit... i've been monitoring longer than that privmsg s1 i'll talk to you and we can be friends, but don't lie to me.. if you lie i'll just have you shut down. :[EMAIL PROTECTED] PRIVMSG kevin2 :.... :[EMAIL PROTECTED] PRIVMSG kevin2 :I havnt had anything else, I wouldnt lie to you.. :[EMAIL PROTECTED] PRIVMSG kevin2 :maybe you are mistaken privmsg s1 no... I'm pretty sure i'm not... first {removed}, then {removed}... they all vanished huh... privmsg s1 .... I was responsible for that. lets be honest or this one will go too. :[EMAIL PROTECTED] PRIVMSG kevin2 :Ok ill tell you the truth, im a coder, on a rooted box running a ircd testing a code I implemented. :[EMAIL PROTECTED] PRIVMSG kevin2 :simple enough. privmsg s1 we both know you've infected enough machines to get in some serious trouble. last count I saw you had over 75 edu's.... not bad :[EMAIL PROTECTED] PRIVMSG kevin2 :if you want me to kill these drones, ill do so, whoever you are, I'm not harming any pc's :[EMAIL PROTECTED] PRIVMSG kevin2 :infected? :[EMAIL PROTECTED] PRIVMSG kevin2 :please privmsg s1 hey do me a favor.. what client do you guys use to connect to these modded by lyr nets? --- My netcat is getting old. :[EMAIL PROTECTED] PRIVMSG kevin2 :this code doesnt do any damage, its called a worm :[EMAIL PROTECTED] PRIVMSG kevin2 :you can use it for testing purposes or to damage people :[EMAIL PROTECTED] PRIVMSG kevin2 :heh :[EMAIL PROTECTED] PRIVMSG kevin2 :beats me really :[EMAIL PROTECTED] PRIVMSG kevin2 :Let me ask you something, what do you want exactly? privmsg s1 to learn... if I wanted you gone I'd have removed you.. I want to learn more about botnets. :[EMAIL PROTECTED] PRIVMSG kevin2 :cuz I mean, honestly i'm not the guy youve been "monitoring" :[EMAIL PROTECTED] PRIVMSG kevin2 :You want me to talk? :[EMAIL PROTECTED] PRIVMSG kevin2 :I'm not talking to a person I just met. :[EMAIL PROTECTED] PRIVMSG kevin2 :I could have these pcs removed any second and be long gone. :[EMAIL PROTECTED] PRIVMSG kevin2 :no harm ever made. privmsg s1 you could, but you wont, you want the money. :) privmsg s1 brian krebs is dying to talk to you... can I bring him in? :[EMAIL PROTECTED] PRIVMSG kevin2 :you mean spyware ? :[EMAIL PROTECTED] PRIVMSG kevin2 :LOL :[EMAIL PROTECTED] PRIVMSG kevin2 :please.. your insulting me :[EMAIL PROTECTED] PRIVMSG kevin2 :I have a decent salary.. I dont need bot money or whatever you bot hunters call it. privmsg s1 really though.. I'd love to get my hands on the ircd and the client... please? then I'll leave :[EMAIL PROTECTED] PRIVMSG kevin2 :lol, I dont know what your talking about, but thats fine. :[EMAIL PROTECTED] PRIVMSG kevin2 :I am telling you ive never MET lyr or know who he is :[EMAIL PROTECTED] PRIVMSG kevin2 :christ privmsg s1 but your using his ircd. privmsg s1 .... unreal modded by lyr :[EMAIL PROTECTED] PRIVMSG kevin2 :what are you talking about? privmsg s1 this version of irc... did you write it :[EMAIL PROTECTED] PRIVMSG kevin2 :LOL where can you even see its modded by lyr? privmsg s1 ... I'm good... I've done this for awhile now. :[EMAIL PROTECTED] PRIVMSG kevin2 :naw not really, but ive hexed it a little bit. :[EMAIL PROTECTED] PRIVMSG kevin2 :lol shutup Kevin2, your full of crap :[EMAIL PROTECTED] PRIVMSG kevin2 :this isnt by lyr nor its his ircd privmsg s1 ...okay... so how do you connect? :[EMAIL PROTECTED] PRIVMSG kevin2 :to where privmsg s1 here privmsg s1 the * 0 user string and non rcp replys dont allow bitchx, xchat, etc.. :[EMAIL PROTECTED] PRIVMSG kevin2 :connecting I guess :[EMAIL PROTECTED] PRIVMSG kevin2 :you seem to know a lot hehe... :[EMAIL PROTECTED] PRIVMSG kevin2 :im out kevin2, nice meeting ya. privmsg s1 i'll talk again later.. thanks :) Of course I dont recommend anyone talk to any bot herders, you'd probably find yourself under ddos or root attacks if you tried... but its always funny when it happens. Shortly after I received this the domain that this herder used vanished, along with the ircd server. -- Nicholas Albright http://www.shadowserver.org [EMAIL PROTECTED] |
pgp8u8qwe9nMr.pgp
Description: PGP signature
_______________________________________________ botnets mailing list To report a botnet PRIVATELY please email: [EMAIL PROTECTED] http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
