[nsp-sec] ACK151: ZeuS botnet (s288421667.onlinehome.us)

[Helmut Springer]

Hi,


On Tue, Jun 09, 2009 at 05:06:20PM +0000, Dirk Stander wrote:
> please find attached a list of ~10k drones which used
> s288421667.onlinehome.us as a proxy for a ZeuS controller (next
> backend hop: http://www.sell-ads.cn/a1b8/s.php)
> 
> Format is: ... | <epoch last seen> <uniq bot id (zip)> | ...

ACK 151, CSIRT taking care.

Best Regards,
helmut

-- 
helmut springer                               HP Technology Services
email:     delta at hp.com
phone: +49.7031.14.4240                      EMEA Escalation Manager