Saturday, December 28, 2013

i-buy.gr hosting ZeuS botnet (now offline)

Working on the ZeuS Tracker C&Cs today.

New server added yesterday 27 Dec hosted on http://www.i-buy.gr 





Control Panel login:



and now for a little B&E action..

boom





Summary:
very small botnet


 Some stats about what OS are getting hit:

Another shell.




Contacted them...and ISP




Control panel now offline.

:-)

Personally, "I-will not-buy.gr" anything from these guys.
This box was ransacked..there were no auth logs, multiple shells, etc.
They obviously need to get their shit together.


No comments:

Post a Comment