SUMMARY: possible hacker

From: Paul Crittenden <crittend_at_storm.simpson.edu>
Date: Mon, 21 Dec 1998 09:21:37 -0600

Thanks to:
Dave Wolinski
Paul Sand
Robert Schneider
Brian O'Neill
Richard Jackson
Charles Jui
Stuart Mckenzie
Steve VanDevender

The basic answer is as follows:
These hacking groups hack shells on servers to run eggdrop bots
or bnc. eggdrop bots are automated roBOTS that act like people on irc.
BNC is a program used to relay or bounce an irc connection. The reason
they do this is to take over chat rooms on irc. They usually target the
most visited channels like #isowarez (warez is slang for pirated software).
He will usually hack one shell and run a sniffer on it to get
Username/passwd info for other accounts (more then half of the universities
had multiple hacked shells from doors). He will run BNC or eggdrop
disguised as a normal process like pine or talk with one letter changed
(i.e. p1ne, taik)

It appears that one student set this up or someone logged in as him. I
changed that users password, the root password and removed the software on
Friday. I haven't had any activity since then but I'll keep a close eye on
things.

Original questions:
>TGIF, I thought when I walked in this morning until I read my mail.
>Has anyone out there heard of a program called bnc. If so could you tell
me >what it does?


Paul Crittenden
Computer System Manager
Simpson College
e-mail: crittend_at_simpson.edu

Classified Ad:
Man wanted to work in dynamite factory. Must be willing to travel.
Received on Mon Dec 21 1998 - 15:22:23 NZDT

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:38 NZDT