[unisog] New Bot variants making rounds

Jason Brooks brooksje at longwood.edu
Mon Apr 4 17:58:25 GMT 2005


Is "RogueIRC" from the bleedingsnort rules? 

-----Original Message-----
From: unisog-bounces at lists.sans.org [mailto:unisog-bounces at lists.sans.org]
On Behalf Of Michael Holstein
Sent: Monday, April 04, 2005 11:25 AM
To: UNIversity Security Operations Group
Subject: [unisog] New Bot variants making rounds


I've been catching the machines with the (very effective) "RogueIRC" 
snort sigs from a few months back.

Happy Hunting,

Michael Holstein CISSP GCIA
Cleveland State University
_______________________________________________
unisog mailing list
unisog at lists.sans.org
http://www.dshield.org/mailman/listinfo/unisog



More information about the unisog mailing list