Telecom and Logistics Associates 

new6.gif (1031 bytes) TLAalert    Security Service 

Translate this page from:  publication: Christian ALT 
  Save Time and Money

TLAnews: Security NEWs Service

 4.7.2000 SecurityWhich Chat channels do hackers follow
Internet chat clients such as instant messaging applications pose a serious security risk for corporations, according to an advisory issued last week by Carnegie Mellon University's Computer Emergency Response Team (CERT).

En français: Quels cannaux de "Chat" suivent les "hackers"
Les logiciels de "tchatche" comme les applications de "instant messaging" posent des serieux risques de sécurité aux entreprises, selon un avis diffusé la semaine dernière par Carnegie Mellon University's Computer Emergency Response Team (CERT).

Home
Consulting
Tech Doc
FW-1 FAQ
Training
Products
TLAnews
Archive
Advertising
 

TLAnews.com
Information for security concerned people

 

Register to TLAnews letter

English version
Chat clients and Internet Relay Chat (IRC) networks are coming under scrutiny in the wake of recent viruses like the I Love You and Life-Stages bugs. Both were programmed to take advantage of instant messaging software and chat rooms to spread themselves rapidly across computers and networks

Flaws in chat client software, for instance, could be relatively easily exploited by crackers to plant and launch malicious code in corporate networks. Similarly, users could be tricked into communicating sensitive information or downloading files containing malicious code via chat clients, he added.

Users must realize that chat software was definitely not meant for secure information exchange

Résumé en français

A la suite des recents virus et trojan les logiciels client pour la "tchache" sur Internet recoivent de plus en plus d'attention de la part des experts en sécurité. Les deux virus I Love You et Life-Stages ont été programmé pour utiliser avantageusement les "chats" pour se propager rapidement.

Les faiblesses de ces logiciels peuvent être facilement exploitées par les pirates pour infiltrer les entreprises avec du code malicieux. De la même manière les collaboraterus d'une entreprise peuvent être trompé par le but réel de certains fichiers transfèrés.

Les utilisaterus doivent réaliser que ces logiciels de "chat" ne sont pas fait pour effectuer un échange sécurisé d'information.


Where do all those "young people " meet on IRC, most of them meet on Undernet.

If you just want to have a try on channels dedicated to hacking use this link it will take you to an applet accessing IRC. It will request from you to trust the signed applet, in order to allow the applet to connect to IRC channels directly. This is circumventing the security model of the Java Virutal Machine (JVM), of your browser. We call this using signed applets.Then your browser will be able to connect to other network servers than the one it came from.

http://www.hack-net.com/html/hncirc/

Then select a server and a channel, and you are ready to ask questions like :

<Surcouf#HackPhreack> What tool to use to crack excel password protected files.

If you are behind a firewall you will have some problems, since normaly the network access to IRC is closed. To open that access on a firewall you need to have access on port 6667 or some other listed in the table below. Your company should not accept that kind of access, but you are free to try it from home.


Server list for Undernet.org
 
North America
Server name Open ports Hosted by
Arlington.VA.US.Undernet.Org 6660-7000, 6060-6070 erols.com
Atlanta.GA.US.Undernet.Org 6660-6669 mindspring.com
austin.tx.us.undernet.org 6665-6669, 7000, 7777 io.com
Baltimore.MD.US.Undernet.Org 6660-6669 abs.net
Dallas.TX.US.Undernet.Org 6661-6669 airnews.net
LasVegas.NV.US.Undernet.Org 6660-6669 lvdi.net
Manhattan.KS.US.Undernet.Org 6666-6669 ksu.edu
McLean.VA.US.Undernet.Org 6666-6669, 7000 cais.net
Montreal.QU.CA.Undernet.Org 6660-6669 polymtl.ca
NewBrunswick.NJ.US.Undernet.Org 6660-6669, 7000, 7070 att.net
NewYork.NY.US.Undernet.Org 6660-6669, 7000 nac.net
SaltLake.UT.US.Undernet.Org 6660-6669 aros.net
SanDiego.CA.US.Undernet.Org 6660-6670 connectnet.com
Toronto.ON.CA.Undernet.Org 6660-6669 total.net
Vancouver.BC.CA.Undernet.Org 6650-6690 direct.ca
Washington.DC.US.Undernet.org 6660-6669 aol.com
WebChat.MD.US.Undernet.Org 8000 (via the web) abs.net

Europe
Server name Open ports Hosted by
Amsterdam.NL.EU.UnderNet.org 6660-6669, 7000 euronet.nl
Brussels.Be.Eu.Undernet.org 6660-6669, 7000, 80 (web) planetinternet.be
Caen.FR.EU.Undernet.Org 6660-6669, 7000 ensicaen.ismra.fr
Diemen.NL.EU.Undernet.Org 6660-6669, 7000 wxs.nl
Flanders.Be.Eu.Undernet.org 6660-6669, 7000 planetinternet.be
Haarlem.NL.EU.UnderNet.Org 6660-6669, 7000, 7777, 8080 vuurwerk.nl
Gothenburg.SE.EU.Undernet.Org 6660-6669, 7000, 7777 chalmers.se
Graz.AT.EU.Undernet.Org 6665-6669, 7000, 7777 tu-graz.ac.at
London.UK.EU.Undernet.Org 6666,6667, 7000, 8000, 9000 nildram.co.uk
Oslo-R.NO.EU.Undernet.Org 6660-6669, 7000 sol.no
Oslo1.NO.EU.Undernet.Org 80 (via the web) sol.no

New Zealand
Server name Open ports Hosted by
Auckland.NZ.Undernet.Org 6667,6668 iconz.co.nz

 

 

 

Some channels to use
 
Channel Server Comment
#hackers_usa
#kingsize welcome to the infamous KingSize's chat zone (united hackers of
#rdhackers RDhackers TeAm
#gphoe Girl Phreakers and Hackers On Earth
#dominikanos Asociacion de Hackers Dominicanos
#hnc Welcome to #hnc, irc home of the HNC Network and Hackers-UK. Dallas.TX.US.Undernet.Org
#evil-hackers It's a channel, duh
#elitehackers Enjoy #Elitehackers Mail us: Elitehackers@yucom.be
#condemnation
#HackPhreack London.UK.eu.Undernet.org Most followed
#Hacktech London.UK.eu.Undernet.org
#Rootworm
#HFX

 

IRC (Internet Relay Chat) is a virtual meeting place where people from all over the world can meet and talk; you'll find the whole diversity of human interests, ideas, and issues here, and you'll be able to participate in group discussions on one of the many thousands of IRC channels, or just talk in private to family or friends, wherever they are in the world.

to get some help in an IRC type on the  command line : /help

 
Author information.
Copyright © [Telecom and Logistics Associates Sàrl]. All rights reserved.
Revised: juillet 04, 2000 .

All information provided is of a general nature and is not intended to address the circumstances of any particular individual or entity. Although we endeavor to provide accurate and timely information, there can be no guarantee that such information is accurate as of the date it is received or that it will continue to be accurate in the future. No one should act upon such information without appropriate professional advice after a thorough examination of the facts of the particular situation.