Threat Level: green Handler on Duty: Jim Clausing

SANS ISC: PSYB0T: A MIPS-device (mipsel) IRC Bot - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
PSYB0T: A MIPS-device (mipsel) IRC Bot

(Thanks to several readers for writing in to the ISC and noting how some eMedia outlets have now picked up on this story - as well as pointers to sources regarding this entity.  We always appreciate your valued input!)

A great document (pdf - dated January 11th, 2009) by Terry Baume goes into detail about how a specific brand of DSL Modem (Netcomm NB5) can be compromised with malicious code that turns the device into a IRC based Bot - named PSYB0T 2.5L

 While discovered several months ago, some recent entries on the DroneBL blog that (among further detail into "PSYB0T") state "We came across this botnet as part of an investigation into the DDoS attacks against DroneBL's infrastructure...".  It certainly appears that PSYB0T may be alive and kicking!

Some further insight into the possibility that this Bot is still evolving (Now Version 2.9L, 3 months later) has been presented on the TeamFurry blog.

G.N. White

Handler on duty (What Will Internet-Based Kitchen Appliances Be Capable Of In The Future?)

G. N.

23 Posts

Sign Up for Free or Log In to start participating in the conversation!