We infiltrated an IRC botnet. Here’s what we found

guest · Nov 19, 2020

We infiltrated an IRC botnet. Here’s what we found
November 19, 2020
https://cybernews.com/security/we-infiltrated-an-irc-botnet-heres-what-we-found/

The CyberNews.com Investigation team carried out an infiltration operation against an IRC botnet and reported it to CERT Vietnam to help take it down.

In order to gather valuable information about the IRC botnet’s activity, we joined its Command and Control channel where we met the botmaster who was responsible for running the entire network of compromised systems. We also used this infiltration opportunity to learn the botmaster’s motives and the possible purpose of the IRC botnet.

What follows is a story of how we managed to detect an attempt to infect one of our systems, and how our curiosity led us to an unlikely interview with the botmaster of a rare, dying breed of a botnet.
Click to expand...

[...] While we can only speculate as to the true purpose of this relatively small and very old-school IRC botnet, the botmaster was likely using it to conduct malware tests or experiment with planting and executing various exploits on compromised systems.

When asked about their current activities, the botmaster claimed to be accumulating networks of compromised devices and selling them off for $3000 to other cybercriminals.
According to the botmaster, these botnets vary from 100 Gbps to 300 Gbps.
Click to expand...

We informed CERT Vietnam about the botnet on October 26, and the country’s computer emergency response team is currently working to shut down the botmaster’s Command and Control server.
Click to expand...

Log in or Sign up

We infiltrated an IRC botnet. Here’s what we found

guest Guest

Log in or Sign up

We infiltrated an IRC botnet. Here’s what we found

guest Guest

Useful Searches