Every day we get at least one email asking about a string they find in their own weblogs.
It'll look something like this:
As we detailed on the website, about 4 years ago. This tool has nothing to do with the ISC:
We disavow and disapprove of it's unauthorized use.
These are not the droids you are looking for.
-- Joel Esler http://www.joelesler.net
Mar 9th 2009
1 decade ago
Looks like w00tw00t is back yet again.
Been seeing strings "/w00tw00t.at.ISC.SANS.Win32:)" over the past several weeks, along with "/w00tw00t.at.blackhats.romanian.anti-sec:)".
Oct 28th 2013
6 years ago