<<< Date Index >>>     <<< Thread Index >>>

Re: [funsec] Re: [Full-disclosure] A Botted Fortune 500 a Day



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -- Nick FitzGerald <nick@xxxxxxxxxxxxxxxxxxx> wrote:

>Steven Adair wrote:
>
>> Also, as a side note, I would like to add that just because SPAM is
>> coming from a certain gateway does not necessarily mean that the
>> machines on
>> their network are infected.  ...
>
>Did you read any of their reports fully?
>
>They don't assume that.  They track the mail back "behind" the gateways 
and they know what forms of what spam are being sent through bot-nets 
because of other systems they run (honeypots, etc) and analysis they 
perform.
>

Indeed.

Also, our (Trend Micro) analysis shows that virtually all spam
these days is being sent by spambots.

The guys at Support Intelligence (Rick and Adam)have done their
homework.

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.1 (Build 1012)

wj8DBQFGJVgcq1pz9mNUZTMRAjFHAKDenx2XP0pPphqwsUW9XymjQ7RU1ACghncX
mqzhB1nidD8GjCoMbSkF27s=
=zjJf
-----END PGP SIGNATURE-----


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/