Toxbot Takedown and Provider Paranoia: A reflection on modern ISP incident response.

No ratings

Presented at AUScert 2007 by

Scott Mcintyre

In October 2005 XS4ALL Internet, GovCERT.nl, and the Dutch High Tech Crime Center co-operated in the 'takedown' of an active Botnet being controlled by Dutch nationals; the experience was a unique collaboration between law enforcement and the private sector to effect real change in an active Botnet filled with what initially appeared to be tens of thousands of comprmised systems. This talk will cover the pre, during and post take down phases of the Takedown and give special insight into the effect this Botnet has had in the Asia-Pacific region, where many systems remain compromised to date.