CURRENT STATUS THREAD

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Elite Baiter Joined: 02 Jul 2006 Posts: 1702

Way too much free time on my hands but heres a timeline of strange events (that may or may not be connected) sorry for long post.

Searching the internet, We all know dozens of sites went down.
We know they are using the following tactics, DDos, Joe bob(sending fake abuse emails), paypal fraud.
We know its been going on since at least september and most likely well before that too.
Heres whats less known: The bots use fast flux, blocking the ip has no effect, not all the bots are attacking.
The methods of infection include on the first of september when the russian gang attacked the indian bank - added an iframe and infected - ONLY Selected victims.
This happened in CHINA too on the 2nd April. The methods to me anyhow suggest the same group.

ON the 26th september scammers changed to using Verified by visa to trick users into signing up phising attempts. Again only infecting a select few computers making tracing it very very hard.
By the 27th october they had enough to launch an attack.

It is feasible these are the same people who a whole country out. The attacks began on April 28, other attacks began may 28th june 28th july 29th august 28th, september 28th, and our own end of september.

Other than that i dont know, after 2 hours i got tired of looking for events, but thats one hell of a timeline with very close together dates of events.
From what i see, at the start of the month these guys go an infect machines, then use those machines at the end of the month. (which fits storms 28 day fast flux cycle incidently.)

Posted: Fri Oct 19, 2007 4:47 pm

http://www.castlecops.com/postx203521-0-15.html

Anyone notice the post by Kirrus dated today. I don't know if he would be prepared to share - but maybe whatever he is doing could be useful.

Posted: Sat Oct 20, 2007 2:01 pm

I have lifted our heads ever so slightly over the wall - if you go to http://forum.419eater.com you should get a little message. Please do not hammer that site - it is just acting as a decoy

Posted: Sat Oct 20, 2007 2:02 pm

^^Page Load Error

Posted: Sat Oct 20, 2007 2:07 pm

Rodus - you are one Eager Beaver aren't you Laughing

1: Please do not hammer the site
2: Give the DNS some time to propagate

Baiting Guru Joined: 08 Jul 2004 Posts: 11857 Location: UK

Works for me, message says:

Quote:

Hello Ninja's! Smile

- Just popping my head up for a second - Go - Bokke! Smile

Posted: Sat Oct 20, 2007 2:10 pm

Told ya

Posted: Sat Oct 20, 2007 2:25 pm

Rover:

Works for me. Smile

Posted: Sat Oct 20, 2007 2:41 pm

Quote:

Hello Ninja's! Smile

- Just popping my head up for a second - Go - Bokke! Smile

Yes Eater is alive and well just hiding out at he moment. If you want access please email an admin

TaDa! (but my quotes still don't work here).

419Eater Admin Joined: 30 Sep 2003 Posts: 7469

A Skinner wrote:

TaDa! (but my quotes still don't work here).

You need to upgrade from Mozilla 0.001 AS Wink

Posted: Sat Oct 20, 2007 4:01 pm

Works for me. GO BOKKE!!!!

Posted: Sat Oct 20, 2007 6:59 pm

Quote:

Visitors so far: 88

Posted: Sat Oct 20, 2007 7:09 pm

Does not work here Crying or Very sad

(please let me in! Bom bom bom bom! Wilmaaaa!)

Elite Baiter Joined: 02 Jul 2006 Posts: 1702

visitors so far 127

Umm what if the peeps are new and dont know a mod?

Chuck Norris Joined: 11 Jun 2007 Posts: 1369

^ ^ ^ Assuming the administrator contact e-mail address linked on the home page (which is at the regular URL) is still the correct one, then I would guess that would be the way to go.

Not quite a Newb Joined: 31 Dec 2006 Posts: 69

I had to search around a bit, but I finally found the admin email to reach Shiver. I emailed him and got the new linky. Smile

I havent been here in quite awhile.

Posted: Sun Oct 21, 2007 12:12 am

I do not want to put the link to here up on that page just in case the bots follow it and find us here. So without being too cryptic - thats the best message I could think of to put up there - if that site stays up for 1 week! then I will bring us all home

*** BANNED *** Joined: 18 Jul 2004 Posts: 2049

Aha! - finally figured it out Rolling Eyes

Thanks for the clue Akai Ryu Laughing

Visitors 536

Posted: Sun Oct 21, 2007 6:24 am

@MommaBates:

Same here actually... just finally found the hideout via. the admin. Razz

(Then again, I got the e-mail a couple days ago and I just forgot to check)
I'm glad to see that the botnet couldn't kill the eater.

Quote:

Ninja Visitors so far: 628

Posted: Sun Oct 21, 2007 7:40 am

Quote:

PC Load Letter.

What the heck is that?

Baiting Guru Joined: 04 Jan 2006 Posts: 3193

Quote:

778

I assume a "he moment" is something to do with the bokkes? Wink

Posted: Sun Oct 21, 2007 5:37 pm

Probably a bit of Bokke and Bell's Whiskey Laughing

Posted: Tue Oct 23, 2007 12:11 pm

A HEADS UP

Yesterday we found a bot accessing the bunker here.

We may have to change URL's shortly.

Posted: Tue Oct 23, 2007 12:23 pm

tin foil hats on and lock and load

Wink

i have plenty of ammo here

Cool

Posted: Tue Oct 23, 2007 1:19 pm

Ahhh.... Ok - after some investigation - The bots have NOT found us here! (A couple of trolls perhaps but no bots) - all we are seeing is my test system (which is being attacked from time to time) logging on here. Nothing to worry about at the moment