Black Frog (okopipi): next generation botnet. No generation spam fighting.
black frog – a new effort to continue the so-called blue security fight against spammers. a botnet, a crime, a stupid idea that i wish would have worked.
blue frog by blue security was a good effort. why? because they wanted to “get spammers back”.
they withstood tremendous distributed denial of service (ddos) attacks and abuse reports, getting kicked from isp after isp.
they withtood the entire anti spam and security community and industry saying they are bad.
the road to heaven is filled with good intentions. their’s was golden, but they got to hell, quite literally, non-the-less.
they did not hurt any spammer (okay, maybe one), as their attacks reaches servers spammers already moved from, domains spammers already dumped for the sake of thousands of other bulk-registered throw-away domains and so on.
their attacks did reach hacked machines which hosted other sites. their attacks reached isp’s with other users and their attacks hurt the internet as well as these other legitimate targets.
blue security also got a lot of pr, good and bad, but they were not here first. lycos europe with their “make love not spam” effort was. isp’s globally nullrouted that service, as it was indeed, much like blue security’s, a ddos tool by the use of a botnet. a botnet in this case being numerous computers controlled from a centralized point to launch, say, an attack.
lycos europe soon realized their mistake and took their service off the air. blue security had 5 millions usd of vc money to burn, so they stayed.
even if they did reach spammers with their attacks (which they didn’t), they would still hurt so many others with the attacks, and the internet itself. when blue security came under attack they themselves said how ddos attacks are bad, and their fallout hurts so much more than just their designated target.
that said, who is to determine said target?
when blue security went down, some of us made a bet as to when two bored guys sitting and planning their millions in some caffe would show up, with blue security’s business plan minus the ddos factor. well – they just did.
thing is, a p2p network is just as easy to ddos. it has centralized points.
it is, indeed, a botnet.
i want to kick spammer behind too, but all i would accomplish by helping these guys is performing illegal attacks and hurting the internet as well as innocent bystanders.
this business model will not last. it will get pr, but it will not be alone. 10 other efforts just such as this will follow. now that black frog made their appearance – sooner rather than later.
how long is this journey of folly going to continue? any service provider which hosts them is as guilty of the illegal ddos attacks as anyone who signs up with them.
the way to kick spammer behinds is to, plain and simple, put them in jail. i.e., change the economics. make it more risky and less cost-effective for them bad guys to spam.
stop black frog now.
i will keep updating about this latest useless harmful project on the blog where this is written, http://blogs.securiteam.com.