A new analysis of dropzones, botnets and keyloggers (like “limbo”) have been published by Thorsten Holz, Markus Engelberth and Felix Freiling: Topic:
Learning More About the Underground Economy:
A Case-Study of Keyloggers and Dropzones
Author Archive
Article about keylogger
Thursday, December 18th, 2008new security scanner
Wednesday, December 17th, 2008A new Version 2.0.0 of the security scanner OpenVAS has been announced for free download: http://www.openvas.org/ , a fork from the goold old Nessus Scanner. I’ll give it a try..
honeyd: insecure temporary file usage
Monday, December 15th, 2008There was a posting on the “Full Disclosure” mailing list showing that Dmitry E. Oboukhov reported an insecure temporary file usage within the “test.sh” script, leaving honeyd vulnerable to local attackers (at least for Gentoo Linux)
——————————————————————-
Package / Vulnerable / Unaffected
——————————————————————-
1 net-analyzer/honeyd < 1.5c-r1 >= 1.5c-r1
Package / Vulnerable / Unaffected
——————————————————————-
1 net-analyzer/honeyd < 1.5c-r1 >= 1.5c-r1
Spamtraps – Posioning tools
Sunday, December 14th, 2008I found this nice collection of poisoning tools: Creates lot of email-addresses to feed spamtraps and to poison spam-sending bots.
Picture of NepenthesFE
Wednesday, December 10th, 2008
NepenthesFE
Wednesday, December 10th, 2008Are you running a nepenthes-honeypot and want to see what is going on? Try this visualizing software from Emre Bastuz and get som nice stats.
http://www.emre.de/wiki/NepenthesFE
Welcome to "spamversand.de"
Wednesday, December 10th, 2008This Blog will show some information about spam.
Setting up Honeypots, information about spamtraps and so on..
Occassionally you will find some information here which you might find useful (or not..:)