427 Botnet fm qxd

www.syngress.com
Responding to Botnets • Chapter 12
439
427_Botnet_12.qxd 1/9/07 3:08 PM Page 439

---

held down continuously until BF userbase has gotten to the
point they can’t perform their equally illegal DDoS attacks.
Guys, download the DB, spam it, compile your lists with it
and trade it around. Use them as froms, mail your anti DB
with them, do whatever you want. Let this database leak to
the point all these stupid a
**
f
**
ks have to get new e-mail
addresses. Adios bluefreaks”
Are You Owned?
E-mail Sent to Blue Frog Customers
Name Removed Mon, May 1, 2006 at 5:30 PM 
To: [e-mail]
Hey, You are receieving this email because you are a member of
BlueSecurity (http://www.bluesecurity.com). You signed up because you
were expecting to recieve a lesser amount of spam, unfortunately, due
to the tactics used by BlueSecurity, you will end up recieving this mes-
sage, or other nonsensical spams 20–40 times more than you would
normally.
How do you make it stop?
Simple, in 48 hours, and every 48 hours thereafter, we will run our
current list of BlueSecurity subscribers through BlueSecurity’s database,
if you arent there.. you won’t get this again.
We have devised a method to retrieve your address from their
database, so by signing up and remaining a BlueSecurity user not only
are you opening yourself up for this, you are also potentially verifying
your email address through them to even more spammers, and will end
up getting up even more spam as an end-result.
By signing up for bluesecurity, you are doing the exact opposite of
what you want, so delete your account, and you will stop recieving this.
Why are we doing this?
Its simple, we dont want to, but BlueSecurity is forcing us. We would
much rather not waste our resources and send you these useless mails.
It’s simple, we dont want to, but BlueSecurity is forcing us. We
would much rather not waste our resources and send you these useless
mails, but do not believe for one second that we will stop this tirade of
emails if you choose to stay with BlueSecurity.
Just remember one thing when you read this, we didnt do this to
you, BlueSecurity did.
If BlueSecurity decides to play fair, we will do the same.
Just remove yourself from BlueSecurity, and make it easier on you.
Name Removed