How to Steal a Botnet and What Can Happen When You Do

[AricDaNinja]

what is this? i got here by watching card counting videos lol

[HackersMagic]

sometimes its hackers vs hackers lols

[ReadThisCommentOrDie]

Flux Pavilion brought you here, didn't he?

[AxelsDawn]

@ReadThisCommentOrDie No, the guys in #bread did.

[MrKristoball]

i watched the whole video :)

[crayonplane]

What is the point of paying for internet security? Obviously, if these guys want this computer, they will be getting it.

[m200Satan]

@crayonplane The only reason nothing is done about hackers, is so Anti Virus companies can make money, Anti virus programs are pretty much useless. The average computer user doesn't have access to most of the bots on the web, the average user only has access to the FUD bot's, or "Fully Undetectable" Which means your AV can't detect it. Av is a money whoring program to scare people, most are virus' themselves

[crayonplane]

@m200Satan Your comments make sense. I was surprised when I found out about cookies, and then followed up and found, a security company, among others and sites I had visited infrequently had cookies in my computer. My understanding is these cookies are not secure, hold abundant info, perhaps the people developing them and installing them, have little technical expertise to protect them?, or perhaps no desire? I don't know what I agreed to in that 200 pg. document (lol).

[KRAZEEKOZ]

Check It>>/watch?v=aHsY_R6rtiw

[MannySteinerBIeeky]

someone make a botnet that wipes out financially etc the scumbags that manufacture sell ship and use and utilise all nature-spirit-abusing noise-polluting gardening & landscaping type machinery.

steal their identities and steal all their money assets property etc. cut off all their services. wipe them out and let real natural people have their land etc, to utilise the way it should be done.

it'd be fitting that zombie-people be ruined by zombie nodes.

[d3pHc0n]

Amazing. Thank you for making this available.

[jjmaster14]

i came here out of pure curiosity. wierd. cool video

[TheInvaderTenn]

I like watching this. It makes me feel more smarter.

[xcutekatie18x]

thumbs up if you like How to Steal a Botnet and What Can Happen When You Do

[rapskal]

What the fucks going on in the background? It sounds like it's being filmed on a construction site! Good video though thanks!

[WhiteTrashSingers]

What sort of countermeasures were put in place on the zombie computers that prevented a universal shut down of the bot net? I'm guessing having control of the C&C didn't give you guys the ability to shut it off? I found this talk very interesting.

[adickel9]

Couldn't you have at least disrupted the CnC structure by closing ports, shutting down obvious botnet services on the client machines or something. In one hand you guys did a good thing by taking over the botnet. But isn't letting the Botnet continue to operate and steal innocent peoples information just as bad as downloading something to someones computer to help them out.?

[HacksawSA]

@adickel9

The goal of these bits of work is ultimately to capture the people running them. The botnet itself is the best leash.

[HacksawSA]

@adickel9

The goal of these bits of work is ultimately to capture the people running them. The botnet itself is the best leash.

[adickel9]

why the fuck did you leave the botnet intact??

[TheSoDHater]

i just saw it now that it was uploaded on 21 of september

P.S. fix the cc at 40:00 to the end :)

watched the whole video nice :D

[jacksparrow322]

While you was in control, why didn't you send a command that uninstalls the bot and removes it from the botnet host would be fucked.

[gir489]

Who the fuck wants to watch an hour of some gook talking?

[xero925]

@gir489 Clearly the educated and the people who want to be educated on how to protect their computers!

[dew02005]

ok does this botnet problem also affect linux or is it just pathetic microsoft that suffers?

[TehRealZERO]

@dew02005 i hope your trolling.

you fucking idiot.

[dew02005]

@TehRealZERO no, actually im not trolling, you fucking idiot. Microsoft has had a list of problems longer than linux's kernel code.. What will it be next? who's the idiot? dumb fuck.

[bananasquads]

has redtube got this shit on it?

[thepapch]

1 hr and 20 minutes did u lost ur ballz? man.. :O wtf

[euhero101307]

What i learnt from this is that, Watch porn with antivirus... Very informative..

[xaaser51]

google sucks :D

[kymon117]

Does he say "fishing" or "phising"?

[nills99]

TLDW

[TheLastPalme]

Omg I just watched that whole thing...

Alot of info, useless in everything I do but I just increased my brain capacity and knowledge so fine with me. Im not sure whether it was boring Or interesting, it was both, is that possible?

[Supremekhaoz]

I CANT BELIEVE it i watched the whole thing now i should get started on my botnet lol JK JK this was interesting

[tuseroni]

@Supremekhaoz i was actually quite close to making my own botnet when i was 14, there was a popular "virus" going around irc. it could self replicate but lacked a payload so it was at best an annoyance. (it looked like an fserve but its trigger was an encoded irc command) i had made an attempt to weaponize it using a remote control script i had written, but the length was too much so it didnt work. had i thought then to use a worm approach i might have succeeded. now im too old for such things.

[Supremekhaoz]

@tuseroni wow really :O but why they're bad and you can arrested hey if I learn about botnets now will I not get arrested and get paid to talk/show about botnets like you ;D

p.s. i'm 14 :P

[tuseroni]

@Supremekhaoz did i say anything about getting payed. i said above i never made it, it didnt work and i was too young to figure out the fix. im not sure if you are being sarcastic or not though, the words seem to show sarcasm but they grammar is so bad it could just be that. anyone you can learn about botnets, that isnt illegal. making them and using them is. had it succeeded i likely would have just shut it down...if i could...sometimes the limitations of making it preclude adding a shut down.

[Supremekhaoz]

@tuseroni No actually I said I thought about it. And that I know how to do it and I know how to make. In that time I guess there was no tutorials on how to make one. Now and days you search and you find stuff that might scare you but knowing these stuff protects me more and give me wisdom!

P.S. My grammar wasn't that bad o.o

[ultimateowner56]

4:42

[alexmeanberg]

Holy shit i actually watched half of this.

[fractalzooms]

awesome talk, but ffs why cant the guy flick his own slides?

[animeboy11097]

how do u make ur videos so long

[trickyoutrickme]

@animeboy11097 First Step: Own Youtube.

[pzmtuthcvpvl]

Knowledge Management in the Intelligence Enterprise

( Artech House Information Warfare Library )

ISBN-10: 1580534945

ISBN-13: 978-1580534949

[Vengfullcarot]

Crackers against the good guy's

[pzmtuthcvpvl]

@Vengfullcarot define good guy / bad guy as a non-dichotomy threat-field, in paticular how do we do select() on IPv6 so as to shield innocent, naive, generally ignorant in the ways of the world (usually from too much parental sheltering) nimrod?

While kind, they just don't recognize how to to function, perfect target for a crazed fan of client-side scripting.

[crogeek]

Awesome! But I must add something, main cause of botnets are people which don't know anything about social engineering. When I usually fix somebody PCs I usually see more and more PCs which aren't updated or with any software updates. People aren't awared how big damage can cause exploit software applications (malware) and this is another way also how botnet is spreading along the Internet.

Educate and then cure! Cheers

[pzmtuthcvpvl]

@crogeek A Social Engineer do not get you in the newspapers unless that is needed. Consider what is reported in newsmedia, if it says something and people get afraid and start looking, they may find sites which some would consider to be adversarial, and what are we doing using a registrar system which could it's self be penetrated?... It is known that greatest risk comes from within.

[crogeek]

@pzmtuthcvpvl and why people need to see newspapers? - I mean "WTF?"

There's a lot of informative things about botnets around the Internet and especially there can be seen how learn social-engineering from these online books. People won't surely anything learn in newspaper, but main problem is that people don't care about their PCs. They usually turn on PCs and nothing else, even they don't know that applications and whole OS need to be updated. That's problem, that people don't know. Cheers

[pzmtuthcvpvl]

@crogeek ( "turn on PCs and nothing else" ) -- that is of interest to me, obviously you said turn on PCs and nothing else but to what extent do we find this actually prevalant?.. { 0:30 newscast can only get a definite amount, cable feeds are improving on that but [ for eg ] RT is the only source I know of that did a flyover of midwest oil-in-river ] so, some chaotic portion of what is actually going on may lead to swarm-behaviour

[crogeek]

@pzmtuthcvpvl this isn't onlinest source, google for botnets on the Internet.

[pzmtuthcvpvl]

@crogeek why would I want to do that if Google employee's are using Internet Explorer?.... ( not to egage you in battle, I was just asking you a question, wanted your considered opinion )

[crogeek]

@pzmtuthcvpvl doesn't matter, because if he's a real IT pro then he's using probably upgraded and patched version of IE in this time.

[pzmtuthcvpvl]

@crogeek ie will be patches on patches on patches that hangs on dns, that's not ...... wait a minute, define pro for me. In paticular, an I.T. pro.

[xnay4]

33,337th viewer- Thumbs up!

[Anddos25]

you can tell this guy dosent have children to feed :)

[tricksFor]

smart ass hackers

[WOLFT3CH]

O:... 1:14:00

[optdestruct]

your videos are very long but pretty informative i like them =)

[omaridotcom]

big and bob

[ESX888]

nice. but it's funny that google doesn't offer their speakers the option to use a remote slide advancer.

[YellingSilently]

@ESX888 there's an app for that, but they wont use it. ;)

[barneygrumble]

the same people that fight it build it.  believe that

[juryben]

the bin size must of been over 9000

[TheBatchGuy]

Wow. These fucking coders are damn good. Hahaha. Wow! That bot must have taken forever to build!

[AolanApara]

hmmcant seem to find a man who ill treat me like a princess

[riotinthecity]

Very informative, you must've been nervous as hell before giving this speech lol

[seandell23]

Very informative

[globalko]

I know the guy who got the "Main computer"

It's lots of computers millions locked up on it

[Cookiez255]

Very nice stuff.

[reiser001]

very interesting talk, thanks

[MrWowzers9111]

just a little video

[OriginalDodmo]

I would be interested to hear the statistics regarding OS version / browser type that were gathered from this experiment?

[justinaurelius]

None are Apple.

[OriginalDodmo]

@justinaurelius Inside knowledge?....

or just Blind FanBoy Faith ;-))

Seriously though, the weak password, poor maintenance type user, easily caught by this sort of crap, is bound to bias the stats towards Windows/IE but it would be interesting to know if there were any Linux or Apple bots.

[justinaurelius]

I've doen research, there was one recent attempt at getting a trojan onto an Apple - via a pirated version of Photoshop.

Beyond that - nothing.

As for fanboy - there are more obnoxious 'dozer fanbois than Apple. Nothing will beat 'nix when it comes to security.

[hostblank]

The porn sites

Innocent victims.

onto the legitimate sites

ROFL!!

[shackaduck]

maybe we should go back in time and kill the guy that invented the virus

[Lundt93]

Nice small video u got there lol

[IPKMB]

I steal ppls bots day n night' yo.

[JustinFromSydney]

torpig, torpig.

Does what ever a torpig does.

[ncodrington]

LOL

[stolendata]

i like when he goes "so, the ru..... i almost said their name there". so, they are russians (everyone already knew this), but are they the russian mafia or the russian government? or maybe these two are synonymous today.

[semigotbanned]

thx for sharing this

[blur3d]

Looking forward to a presentation on the Mebroot take over :)

[F1R3P1L0T]

Im sick of the word "Torpig" :P

[cheetos530]

This is a good video, very interesting to see the other side of the Malware/Spam/Virus/Trojan side underground. Saw this when it had a couple hundred views, wonder why my comment wasn't posted. Just wanted to say, Thank you guys for taking the time to upload these lengthy videos. And I think we all agree with der8lub about the Questions in the Audience.

[der8lub]

thanks for agreeing :)

hope they will do so, i really enjoyed this presentation (like almost every of googletechtalks) but it would be great, if i could follow the questions at the end too

[dg1sek]

very interesting. thank you. scary indeed.

[rne1223]

I'm scare now... :(.

[riwilo]

Of becoming part of a botnet? Don't be, just keep your software up to date (for example by using FileHippo Updater or Secunia PSI) and use your brains when browsing on internet or reading mail. These precautions work better than any antivirus software.

[prayskiller]

I totaly agreed with this.

[Tia1ko]

Will that "FileHippo Updater" thing work on my Debian box?

[riwilo]

No, as Debian user you have better options, but I guess I don't need to tell you that.

[ZirconCode]

One of the better google talks,

Thanks Google for Taking the Effort to Upload them!

Maybe not many people watch them but those which do really enjoy them =D

[foojoku]

It does amaze me time an again how few views these talks get, despite the high calibre of the speakers and the topics.

[kakkoister]

Because the majority of Youtube users are people who really don't care about expanding their knowledge much, and just want to sit around laughing at fart jokes.

[AnonShawi]

lol, you said fart

[stolendata]

i'm not so amazed over how few views these get - 95% of the people using the internet fall into that segment of the "youtubian populace" that are perfectly happy just watching a dancing cat.

[bud389]

@stolendata And the other 5% are elitist faggots that think their somehow better.

[der8lub]

very informative - thx for sharing

next time, please repeat the questions, when there is no mic in the audience