• savage

    “The Clickbot.A botnet was first publicly reported by Swa
    Frantzen, an incident handler at SANS [4], in mid-May 2006.
    At the time, based on a screenshot of the botmaster administration
    console obtained by Frantzen (similar to the one shown
    in Figure 2), the bot client was believed to have been running
    on just over 100 machines. Frantzen was able to obtain access
    to the botmaster administration console because it was not protected
    by a password, HTTP authentication, or IP whitelisting.”

    I was anticipating a far more exciting discovery.

  • http://www.seo-theory.com/ Michael Martinez

    It’s a good start but there is a lot more out there and they really need to demonstrate that they have a handle on this.