IRC stands for "Internet Relay Chat". It is a multi-user, multi-channel chat system spread through the Internet. People, identified with their "handle" or nickname, converse with others in "chatrooms". The anonymity allows hackers to find one another and exchange possibly illegal information.
IRC Network: There are numerous IRC "networks", which consist of servers that host communal chatrooms. The chat levels are so high that no single server could handle the volume, so more than one server networked together is needed. Popular IRC networks are DALnet, EFNet, Undernet, and NewNET.
Channels: Each network has hundreds of "channels" where people can chat with each other. The channels are generally named according to the topic that people discuss on that channel. Someone creates a channel by entering it and naming it. The channel disappears as soon as the last person hasleft. The person who created the channel becomes the administrator/operator, or "chanops" or "ops". They have full control over the channel. Sometimes channels can be registered so that they persist even after everyone logs off, and that the creator can still log back on and resume control.
takeovers: On non-registered channels (the majority), you lose all privileges when you log off. This leads to hackers who try to kick everyone off in order to take over the channel.Two direct mechanisms are to DoS the persons machine or flood their IRC channel. Such battles become "king of the hill" tournaments as hackers fight to gain control of the channel, and then "hold" control in the face of other hacker attacks. One technique involves maintain multiple connections to a channel using multiple machines (or virtual machines).
Bots: Bots (robots) are automated IRC clients for administering channels. The camp on the channel to keep it open, uplist access of friends, and prevent misuse of the channel.
bot-nets and packet tool networks: Networks of bots that act as redundent backups. For example, if one bot is kicked off, it reconnects and another bot will give it back operator privileges.
Bounce: In order to hide their identity, hackers often bounce their connections through other machines. The most popular are WinGate machines with open SOCKS ports.
