by certifiedbug on September 22, 2011
in Microsoft
The Official Microsoft® Blog
Rustock Civil Case Closed: Microsoft Refers Criminal Evidence to FBI
22 Sep 2011
As you may have read in this morning’s edition of CNET, on Sept. 13th, Judge James L. Robart, of the U.S. District Court for the Western District of Washington ruled that the domain names and Internet protocol addresses used to host the botnet would be effectively removed from the defendants’ control. This case not only enabled the take down of a botnet known to be one of the single largest sources of spam on the Internet, but it is now helping to ensure that this botnet will never be used for cybercrime again. However, we’re not stopping here.
We are also turning over all of the evidence we collected during discovery and our investigation to the FBI, to help ensure those responsible for operating the Rustock botnet are held accountable for their actions. It is important to note that Microsoft ‘s $250,000 reward offer for information that leads to the arrest and conviction of Rustock’s operators remains in effect, but now any tips should be sent directly to the FBI at MS_Referrals@ic.fbi.gov.
Article:
http://blogs.technet.com/b/microsoft_blog/archive/2011/09/22/rustock-civil-case-closed-microsoft-refers-criminal-evidence-to-fbi.aspx
Certifiedbug, July 18, 2011. Microsoft Offers $250,000 Reward for Information on Rustock
Krebs on Security
The TDSS botnet is the most sophisticated threat today, according to experts at Russian security firm Kaspersky Lab. First launched in 2008, TDSS is now in its fourth major version (also known as TDL-4). The malware uses a “rootkit” to install itself deep within infected PCs, ensuring that it loads before the Microsoft Windows operating system starts. TDSS also removes approximately 20 malicious programs from host PCs, preventing systems from communicating with other bot families.
Rent-a-Bot Networks Tied to TDSS Botnet
Krebs takes a closer look at a Russian individual who appears to have close ties to the TDSS operation.
Who’s Behind the TDSS Botnet?
TDL4 – Top Bot
http://www.securelist.com/en/analysis/204792180/TDL4_Top_Bot#5
Most often, TDL is planted on adult content sites, bootleg websites, and video and file storage services.
