Date: Wed, 08 Mar 2006 02:35:10 +0200
From: Gadi Evron <ge@linuxbox.org.>
To: bugtraq@securityfocus.com
Subject: announcement: reporting and mitigating malicious websites and phishing
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Greylist: Sender succeded SMTP AUTH authentication, not delayed by milter-greylist-1.7.5 (linuxbox.org [24.155.83.21]); Tue, 07 Mar 2006 18:37:18 -0600 (CST)
X-Virus-Scanned: antivirus-gw at tyumen.ru
On the public botnets mailing list, there have been quite a few "off
topic" reports of Malicious Websites. Sites holding malware, malicious
code, drive-by installs, phishing sites, etc. The botnets list is of
high traffic while it is busy figuring itself out.
We expected this might happen, and so we prepared a second list where
these can be handled, along with potentially phishing, etc.
Baddies on Websites.
There is quite a community of sysadmins, security professionals, etc.
who deal with these daily. It was nice to find the public being so
effective.
The new PUBLIC and OPEN mailing list where anyone can join in
and report suspected malicious web sites is now open.
The mailing list will serve as as place:
*. Where you can discuss detection techniques.
*. Where you can report the sites.
*. Where all relevant groups (private or otherwise) will get your reports.
*. Where the relevant ISP will be automatically notified.
*. Where you can see action taken on your reports.
To subscribe, go to the following page:
http://www.whitestar.linuxbox.org/mailman/listinfo/phishing
Otherwise, to report a malicious website/phishing PRIVATELY and reach
all relevant groups, please send email to:
c2report@isotf.org
Thanks,
Gadi.
