#1 Hail the prophet. Yes, it is the YEAR OF LINUX!!!
"
--------------------------------------------------------------------------------
Botnet targeted up to 100,000 DSL modems and routers
by Steve Ragan - Mar 24 2009, 18:58
Botnet targeted 80-100,000 DSL modems and routers. (IMG: Netcomm)
There is a new Worm, an IRC-based Bot called Psyb0t, which is targeting embedded Linux devices. The devices, commonly DSL modems or OpenWrt / DD-WRT, must be mipsel based and have SSH, Telnet , or Web-based interfaces available to the WAN, to qualify as vulnerable.
Psyb0t itself is not new. In late 2008, researcher Terry Baume discovered the botnet and wrote about it and its methods earlier this year. You can read his research here.
Baume’s research focused on the Netcomm MB5 ASDL modem, but later discovered that modem brands in Italy, Brazil, Ecuador, Russia, Ukraine, Turkey, Peru, Malaysia, Columbia, India, and Egypt were suspect as well. Adding to this is the OpenWRT and DD-WRT projects, which would open the infection point up to devices in the U.S. and U.K.
The botnet came into the public eye this week because of a report posted by DroneBL, a real-time monitor of abusable IPs. DroneBL noticed the botnet as it investigated Denial-of-Service attacks on its systems. Digging deeper, it discovered the same botnet that Baume had written about, but now it was much larger -- the group speculated that the botnet was around 100,000 systems strong."
http://www.thetechherald.com/article.php/200913/3290/Botnet-targeted-up-to-100-000-DSL-modems-and-routers
|