[nsp-sec] Linux botnet with IRC C&C -> Any T-Systems Reps here?

[Serge Droz]

Hi List,

Is anyone from T-Systems on the list?

> The attacker downloaded the IRC bot software from
> hxxp://217.150.150.137/pigspy.tgz.
> 

This IP is still up. We would appreciated the logs of these machine, as
it could give us mor intell on potential vitims.


Thanks for your help
Serge



-- 
SWITCH
-----------------------
Dr. Serge Droz, Team Leader Security
Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland
phone +41 44 268 15 63, fax +41 44 268 15 78
serge.droz at switch.ch, http://www.switch.ch