[nsp-sec] ACK ASN852 - RE: KR DDoS C2 machines - 20090915

[Chris Calvert]

ACK for ASN 852 (TELUS).

Thanks Nick,

Chris

> -----Original Message-----
> From: nsp-security-bounces at puck.nether.net [mailto:nsp-security-
> bounces at puck.nether.net] On Behalf Of Nicholas Ianelli
> Sent: Tuesday, September 15, 2009 7:12 AM
> To: 'nsp-security NSP'
> Subject: [nsp-sec] KR DDoS C2 machines - 20090915
> Importance: High
> 
> ----------- nsp-security Confidential --------
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Folks,
> 
> Here are a list of active C2 machines that are part of the KR DDoS
> family of malware. These machines have the capability to collect
> compromised host data.
> 
> Timestamps confirming activity are from 20090915 and start at 0630GMT to
> 0721 GMT.
> 
> I am more than happy to assist with identification and cleanup, but if
> these could be taken down, that would be great!