Re: hacked server, DDoS bin installed
Andrew Sledge <[email protected]>
| Newsgroups | gmane.comp.security.incidents |
|---|---|
| Message-ID | <[email protected]> |
Typically, you should contact your local FBI office - they can be found in the white pages. Take the machine offline and do nothing with it. If you tamper with it, the forensics results may be skewed and any defense lawyer will use that fact to their advantage. Also make sure you document EVERYTHING you have done since encountering the exploit. [email protected] wrote: > a customers server got hacked.. binary in tact, seems like they were DDoSing.. strings brings up the irc server, channel name, key.. where is the fbi address where i can send this information to? > > thanks -Sledge