Trinoo
The trinoo or trin00 is a set of computer programs to conduct a DDoS attack. It is believed that trinoo networks have been set up on thousands of systems on the Internet that have been compromised by remote buffer overrun exploits.[1]
The first suspected trinoo attacks are described in CERT Incident Note 99–04.[2] A trinoo network has been connected to the February 2000 distributed denial of service attack on the Yahoo! website.[3]
Trinoo is famous for allowing attackers to leave a message in a folder called cry_baby. The file is self replicating and is modified on a regular basis as long as port 80 is active.
Trinoo was authored by a teenager from New Orleans who went by the alias phifli.