Botnet hunting resources

Tue Aug 11 17:56:35 UTC 2009


>-----Original Message-----
>From: Bradley Freeman [mailto:bradley.freeman at csirt.ja.net]
>Sent: Tuesday, August 11, 2009 6:37 AM
>To: 'NANOG'
>Subject: RE: Botnet hunting resources
>
>I surprised that nobody has mentioned the work of shadowserver.org,
they
>are
>able to send reports of malware infections on your networks (see
>http://www.shadowserver.org/wiki/pmwiki.php/Services/Reports). The
>service
>has proved to a brilliant tool in mitigating various forms of malware
>such
>as Conficker with almost 0% false positives.
>
>Cheers
>
[TLB:] ThreatSTOP are a Shadowserver partner, and they, along with the
Cyber_TA project @ SRI, are the source of our botnet C&C block list.