thursley

5 ms·

1. 1.▲
   by thursley 2y ago

   In my experience this can be caused by a loadbalancer, for example not being able to route (properly) to servers in the pool or a difference in configuration/patch-level between them.
2. 2.▲
   by thursley 12y ago

   Snort IDS rules to detect abuse can be found here: http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-liv...
3. 3.▲
   Large botnet cause of recent Tor network overload(blog.fox-it.com)

   79 points by thursley 13y ago|16 comments
4. 4.▲
   by thursley 14y ago

   Writeup of the network monitoring service that discovered the infection: http://blog.fox-it.com/2013/02/21/writeup-on-nbc-com-distrib...
5. 5.▲
   by thursley 14y ago

   This was/is an infamous modem vulnerability: http://www.securityspace.com/smysecure/catid.html?id=10020 It could force a modem to hangup and redial a number.
6. 6.▲
   by thursley 14y ago

   More technical details (pdf) on: http://www.crysys.hu/skywiper/skywiper.pdf Although the naming differs it has been noted on several blogs that it is the same malware.
7. 7.▲
   Critical analysis of Microsoft Operation B71 (Zeus Botnet disruption)(blog.fox-it.com)

   2 points by thursley 14y ago|0 comments