11 Aug
2009
11 Aug
'09
1:56 p.m.
-----Original Message----- From: Bradley Freeman [mailto:bradley.freeman@csirt.ja.net] Sent: Tuesday, August 11, 2009 6:37 AM To: 'NANOG' Subject: RE: Botnet hunting resources
I surprised that nobody has mentioned the work of shadowserver.org,
they
are able to send reports of malware infections on your networks (see http://www.shadowserver.org/wiki/pmwiki.php/Services/Reports). The service has proved to a brilliant tool in mitigating various forms of malware such as Conficker with almost 0% false positives.
Cheers
[TLB:] ThreatSTOP are a Shadowserver partner, and they, along with the Cyber_TA project @ SRI, are the source of our botnet C&C block list.