Botnet

Second MSRT Release in April

April 26, 2011

Microsoft Malware Protection Center In continuation of our support for the takedown activities on the Win32/Afcore botnet, we are releasing a second edition of MSRT in April. This edition includes variants of Afcore released by the criminals behind it at approximately the same time as the previous edition of MSRT. While MSRT has traditionally been [...]

Read the full article →

Joint effort brings down Rustock Botnet

March 17, 2011

Microsoft On The Issues 17 Mar 2011 This operation, known as Operation b107, is the second high-profile takedown in Microsoft’s joint effort between DCU, Microsoft Malware Protection Center and Trustworthy Computing – known as Project MARS (Microsoft Active Response for Security) – to disrupt botnets and begin to undo the damage the botnets have caused [...]

Read the full article →

Researchers obtain sample of ZeuS-SpyEye Banking Trojan code

January 25, 2011

Security researchers at Trend Labs have acquired the first sample of code, it includes “Anti-Rapport: A built-in option to evade Rapport Trusteer software” a security application offered to customers of many banks as a defense against banking Trojans. http://blog.trendmicro.com/spyeyezeus-toolkit-v1-3-05-beta/ A Closer Look at Rapport from Trusteer 29 April 2010 http://krebsonsecurity.com/2010/04/a-closer-look-at-rapport-from-trusteer/ Mergers and Acquisitions in the [...]

Read the full article →

Malware aimed at employment opportunities posted on-line

January 21, 2011

Internet Crime Complaint Center (IC3) Recent FBI analysis reveals that cyber criminals engaging in ACH/wire transfer fraud have targeted businesses by responding via e-mail to employment opportunities posted online. Recently, more than $150,000 was stolen from a US business via unauthorized wire transfer as a result of an e-mail the business received that contained malware. [...]

Read the full article →

Researchers take down Koobface servers

November 14, 2010

ComputerWorld reports that security researchers, working with law enforcement and Internet service providers, have disrupted the Koobface botnet. Late Friday afternoon, Pacific Time, the computer identified as the command-and-control server used to send instructions to infected Koobface machines was offline. According to Nart Villeneuve the chief research officer with SecDev Group, the server was one [...]

Read the full article →

De-glamorizing Fraud

October 8, 2010

Graham Cluley’s blog Is this the world’s sexiest hacker? Kristina Svechinskaya has been charged with one count of conspiracy to commit bank fraud and one count of false use of passports. That’s not how I would define hacking. Prosecutors claims that Svechinskaya was recruited to join a “mule” organisation that had numbered over two dozen [...]

Read the full article →

Botnet Spam

October 8, 2010

FireEye Malware Intelligence Lab Silent Rustock There has been a significant observed drop in worldwide SPAM levels during the last month or so. M86 thinks it’s due to Rustock, the world’s largest spam botnet, suddenly stopped sending spam for unknown reasons. McAfee has expressed a different point of view. According to them, the steep drop [...]

Read the full article →

Manhattan U.S. Attorney charges 37 in ZeuS Banking Fraud

October 4, 2010

FBI Press Release September 30, 2010 According to Complaints unsealed today in Manhattan federal court, the cyber-attacks began in Eastern Europe, and included the use of a malware known as the “Zeus Trojan,” which was typically sent as an apparently-benign e-mail to computers at small businesses and municipalities in the United States. Once the email [...]

Read the full article →

Nineteen Arrested in £20 million ZeuS Banking Fraud

September 29, 2010

Officers arrested 15 men and four women aged between 23 and 47 on suspicion of the Computer Misuse Act, Proceeds of Crime Act and Fraud Act. Detective Chief Inspector Terry Wilson told the Mail that the Virtual Taskforce worked closely with several UK banks to gather the evidence and information needed to shut down the [...]

Read the full article →

Zeus botnet vendor toolkit vulnerability

September 27, 2010

Security researcher Billy (BK) Rios has discovered a vulnerability in the Zeus botnet toolkit which would allow the command and control channels to be hijacked. The C&C channels send instructions and software updates to compromised computers which often number in the hundreds of thousands. In the spirit of responsible disclosure Rios attempted to inform the [...]

Read the full article →