Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: UnRealCD compromised by Trojan - SANS Internet Storm Center SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
UnRealCD compromised by Trojan

As Syzop over at UnRealCD put it..."This is very embarassing".  It appears that the popular UnRealCD IRC Server has been compromised with a Trojan since November 2009.  If you are the keeper of one of the many UnRealCD instances I suggest you upgrade ASAP, and it probably wouldn't be a bad idea to take a long hard look at your server for other indications of compromise.

More information over at the UnRealCD forums.

Thanks to reader Colin for the heads-up!


-- Rick Wanner - rwanner at isc dot sans dot org -


324 Posts
ISC Handler
Jun 13th 2010

Sign Up for Free or Log In to start participating in the conversation!