12/05/2008
Worm infection in Belgium could have serious consequences - protect yourself and continue to clean up
scarlet and superfit have still their botnet on their network but if you thought they would bring it down ? No these are still up since a few days so why not wait a month or so ? And superfit.be is still heavily attacking other sites. But would you think that somebody somewhere
http://www.robtex.com/ip/80.200.164.110.html skynet BLACKLISTED (and if you do not do anything your whole domain skynet.be will be blacklisted by admins over the world who are fed up with the fact that you aren't cleaning up your network). Don't say you didn't knew
193.191.138.243
Server of the Flemish Community that seems to be infected. I hope you don't have direct connectioins with these networks and if you have I hope that you have put firewalls and antiviruses between them (sometimes network people just put links directly into routers without telling the security people who discover afterwards that their network is linked to a high number of networks without any security.) For the security people in the Flemish community. Look at your firewall and filter on port 445 normally you should see the infections going out.
It looks as if Skynet is cleaning up after 17h - let's hope they continue because now the stakes are becoming VERY HIGH. You can't expect admins to be patient for over more than a week while you are not doing enough to contain the attacks. If this continues they will start just blacklisting and blocking and skynet and its users will be occupied during months trying to convince networks and security installations to trust them again. You can lose trust in a week but you will need months to get it back again. You skynet, decides what it is going to be. The business case is that your reputation can be ruined if you continue like this for another several weeks like that. I suppose your reputation may cost some money. What about 10% of your total advertising budget ?
That also counts for others.
and by the way when you take over Scarlet, take that control and command center out. I don't think you would like that present - especially if you already have a number of infected computers in your networks.

and These are DDOS attacks

and these are the attacks happening on our networks right now

09:54 | Permalink | Comments (0) | Email this
|
|
del.icio.us
|
|
Digg |
Facebook




Post a comment