[nsp-sec] ACK Re: 50K Ips participating in attacks on twitter, LJ, etc

[YoungBaek Kim]

ACK for KR ASNs. : 3786, 4668, 4766, 9318, 9683, 10066, 17853, 17858, 17864, 23563, 38426

and we had a contact with AS9683.

We found Virut and Netbot in the PC.
We are going to see relation between the malware and the attack.

----- Original Message ----- 
From: "Stephen Gill" <gillsr at cymru.com>
To: "nsp-sec" <nsp-security at puck.nether.net>
Sent: Monday, August 10, 2009 3:23 PM
Subject: [nsp-sec] 50K Ips participating in attacks on twitter, LJ, etc


> ----------- nsp-security Confidential --------
> 
> Hi team,
> 
> Please see the following URL for a list of ~50K Ips believed to be
> participating in the most recent attacks against twitter and the like.
> 
>    https://www.cymru.com/nsp-sec/Owned/20090809_twitter.txt
> 
> Timestamps in GMT.
> 
> Use your nsp-sec credentials to access.
> 
> Cheers,
> -- steve
> 
> -- 
> Stephen Gill, Chief Scientist, Team Cymru
> http://www.cymru.com | +1 630 230 5423 | gillsr at cymru.com
> 
> 
> 
> 
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
> 
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
> community. Confidentiality is essential for effective Internet security counter-measures.
> _______________________________________________
> 
> 
>