Once-prolific Pushdo botnet crippled Security researchers have disrupted the botnet known as Pushdo, a coup that over the past 48 hours has almost completely choked the torrent of junkmail from the once-prolific spam network. Researchers from the security inteligence firm LastLine said that they identified a total of 30 servers used as Pushdo command and control …
"You attempted to reach anubis.iseclab.org, but the server presented a certificate issued by an entity that is not trusted by your computer's operating system. This may mean that the server has generated its own security credentials, which Google Chrome cannot rely on for identity information, or an attacker may be trying to intercept your communications. You should not proceed, especially if you have never seen this warning before for this site."
The Whitehats need to publically name and shame all of the hosts which refuse to co-operate when shown the data and participate in the takedown.
Additionally, all of the upstream providers of these hosts should be informed and shown the data, as they are really the only ones with leverage over the lower tiers. Removable of your ability to provide internet to your customers is a pretty good lever to get an ISP into line.
It would also then be pertinent to handover the data to local police authorities. In western countries im sure you could get a response against these ISP's for hosting spam/malware/virus servers/etc. In the rest of the world probably not so much action will be taken, but at least we can hope that in the more corrupt countries the local poli's will start demanding a cut for turning their back and so make it slightly less profitable to host these bastards...
Just an idea...
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
