scoutt

A network of infected Linux servers is being used to distribute
malware. All of the compromised machines are serving legitimate
content through the Apache webserver and at the same time are running
the nginx webserver and serving malicious content through port 8080.
The Linux server botnet is connected to a botnet of home computers.
The network is presently believed to comprise approximately 100 nodes.
http://www.h-online.com/security/Bot...--/news/114225
http://www.theregister.co.uk/2009/09..._push_malware/
[Editor's Note (Skoudis): When I first saw this, I thought: "How
cute! A baby bot-net of only 100 nodes." But, then, I started to
consider the damage a determined attacker could do with a network of
highly stable bots on a very flexible underlying platform. It's not
so cute at all.]

__________________
Have a Script or Snippet you want to share?

WWW Standards: HTML 4.01, CSS2.1, CSS3, XHTML 1.0
PHP Standards: PHP Standards