Hello and welcome to the Friday, July 10th, 2006 edition of the Sands International Storms Center's Stormcast.

My name is Johannes Ulrich, recorded today from Jacksonville, Florida.

And this episode is brought you by the Sands.edu graduate certificate program in industrial control systems security.

As a reminder, of course, next week we'll start with Sands Fire. If you see me around in D.C.

During Sandsfire, I usually have some in a storm center stickers with me or such. So just look me up and I'll also do a keynote outlining.

Some of the future things that we envision for Inan Storm Center.

So that'll be Monday evening.

Jason Callahan, one of our undergraduate interns, did today contribute a, well, kind of a nice, interesting diary about what I used to call graffiti bots.

So these are bots, systems that are scanning just the internet, that aren't really sort of attacking buttons that just

well leave a message behind the logs

and in this particular

case well it's helped me escape

from Belarus please

is the message that's

being spread here it's

inside the user agent

it's also as part of the URL that is being used.

Now, this particular bot looks for HTTP and for S.H.

It does attempt a small list of username and passwords

when it hits an open SH or Telnet port.

But beyond that, really doesn't do much, but spread itself.

I've had a couple of these in the past that basically just for sort of leaving messages in the logs.

...