New answers tagged

3

In addition to Rory's points... Internet Relay Chat is actually incredibly insecure I don't think IRC is in any way secure by default. Almost all servers utilize communication through plaintext. Your ISP can snoop on the contents easily. All of your messages, in general, are unencrypted. You have to install addons to enable encrypted communications, if ...


2

Rory did a good job of answering the IRC part, but to answer the second part about botnets, it's not that IRC is or isn't secure. What's a botnet? A botnet is a collection of devices, usually computers (but can also be cellphones and pretty much any other internet-connected device, like a refrigerator), that are connected to a C&C server to receive ...


8

Anonymity is the main one: you can use IRC servers anywhere, or set up your own, rather than be tied in to centralised messengers you don't need any personal data tied to your IRC account, so tracing you is next to impossible Any time you send commands directly, you are much more directly discoverable, whereas a botnet using IRC is next to impossible to ...


3

It may be possible, but attackers usually relies on an amplification attack to ensure the traffic coming from the botnet is much more effective. Amplification attacks are easily implemented on udp protocols where the source IP can be trivially spoofed as there is no three way handshake to establish a connection. If a udp protocol allows you to receive a ...


2

Botnets are usually part of a collection of hacked servers, but there are also websites / programs where people host DDoS platforms so they can "participate," such as the Low-Orbit Ion Canon. Regarding DDoS attacks, the bandwidth of the attack is only limited by the size of the bot net, and their combined available bandwidth. There's nothing magical about ...


1

I was always under the impression that these injections were just injecting html which would render another control. For example, when the victim browses to www.bankingwebsite.com they are presented with a login screen that normally asks only for cardnumber and password. Suppose we also want their CCV, expiry date and their mothers maiden name. We can ...


2

I don't know about Zeus in particular, but generally speaking, it's easy to do this using debug APIs like VirtualProtectEx and WriteProcessMemory. Open a HANDLE to the target process, add some executable memory (with VirtualAllocEx), put some malicious code in there, re-map the virtual address of the executable code of the library that holds your target API ...



Top 50 recent answers are included