Spammers Moving to Disposable Domains

Spammers and the botnet operators they’re allied with are continuing to adapt their techniques to evade security technologies, and now are using what amount to disposable domains for their activities. A new report shows that the spammers are buying dozens of domains at a time and moving from one ...

Symbian Mobile Botnet Affecting 100K Handsets

Mobile malware that affects Symbian Series 60 handsets is being used to create a botnet. Read the full article. The Register...

Kraken-Based Botnet Makes A Comeback

Since April, a son-of-Kraken botnet has infected an estimated 318,058 machines – about half as big as the original Kraken was at its height in the middle of 2008, according to Paul Royal, a research scientist at the Georgia Tech Information Security Center. Read the full article. The Register...

SSH Brute Force Attacks Resurface

Security experts are warning about a fresh round of attacks against SSH implementations. The attacks are brute-force attempts to authenticate to remote SSH servers, a tactic that has been used quite often in the past in distributed attacks. The attacks, which the handlers at the SANS Internet Sto...

Banking Botnet in Eastern Europe Steals, Disrupts

Banks in Russia and Ukraine are under continued siege by criminal gangs wielding a sophisticated, next-generation exploitation kit that hacks the financial institutions’ authentication system and then hits it with a denial-of-service attack. Read the full article. The Register...

DDoS Extortionists Offer 'Discount' Competitor Attacks

One of the most novel approaches for acquiring new botnet clients is a weird combination consisting of direct DDoS extortion, followed by penalties for delayed response and the offering of 30% discount in case the victim wants to DDoS the competition once the ransom is paid. Read the full article...

New, Simple Twitter Botnet Tool Debuts

There is a new point-and-click tool circulating online that enables virtually anyone to create a piece of malware that will connect a PC to a budding Twitter botnet. The tool, known as TwitterNET Builder, is being used by attackers to build quick and easy botnets that are then controlled through...

Botnet Herder PROXIEZ Goes Offline

One of the internet’s most resilient and crimeware-friendly networks PROXIEZ-NET was knocked offline after the plug was pulled on its upstream service provider, security watchers said. Read the full article. The Register...

Botnet Herders Can Command Via Twitter

A security researcher has unearthed a tool that simplifies the process of building bot armies that take their marching orders from specially created Twitter accounts. Read the full article. The Register...

Gumblar Botnet Shifts Tactics

The criminals behind the Gumblar botnet and malware campaign have been adapting their techniques, as attackers are wont to do, in order not only to evade detection but to prevent researchers from downloading and analyzing new versions of the malware. A new analysis of the recent activity by Gumbl...

Mariposa Botnet Suspects Desired Security Jobs

Two of the accused Mariposa botnet operators in Spain requested jobs at Panda Security in March some 2 months after their arrest, according to a Panda Security official. Read the full article. KrebsonSecurity...

Which is the Real ZeuS Botnet?

By Roel Schouwenberg, Kaspersky Lab Amongst some others the Zeus bot is one of the most prolific bots in the wild and in the media. Lately there has been quite a few reports on the aspects surrounding Zeus, such as new research and the Troyak takedown. Naturally, this is great news. However,...

New Storm Variant Merely a Spambot, Experts Say

The new piece of malware that surfaced this week and has been hailed as a return of the Storm worm, is in fact simply the worm’s original spam engine with some new components wrapped around it, researchers say, and not a rebirth of the botnet itself. Storm was a major botnet threat during its...

Custom Botnet-For-Hire Builder to Plead Guilty

A Mesquite, Texas, man is set to plead guilty to training his 22,000-PC botnet on a local ISP — just to show off its firepower to a potential customer. David Anthony Edwards will plead guilty to charges that he and another man, Thomas James Frederick Smith, built a custom botnet, called Nettick,...

New Storm Botnet Variant Making Spam

Security watcherssay they’ve spotted a new botnet that bears the hallmarks of Storm and is sending out a “massive volume of spam emails to targeted recipients.” Read the full article. The Register...

Advertising Losses Mount in Botnet Click Fraud

The clever hacking of online advertisements has quietly grown into a multi-million dollar criminal industry showing no signs of slowing. The big losers: online advertisers. Read the full article. The Last Watchdog...

New Zeus Botnet Variant Targets Firefox

A new version of the data-stealing trojan Zeus is for the first time able to successfully exploit Mozilla’s Firefox browser to commit sophisticated online banking fraud. Read the full article. Secure Computing...

Zeus Botnet Exploiting PDF Flaw

The Zeus botnet is now using an unpatched flaw in Adobe’s PDF document format to infect users with malicious code, said security researchers. Read the full article. Computerworld...

New P2P Botnet Forming

Security researchers have identified a newly formed botnet that comprises machines infected with a Trojan specifically designed to manage the downloading and installation of a spectrum of other malicious software. The Trojan, known as Heloag, installs itself on PCs after being downloaded from one...

Spyware Botnet 'GhostNet' Uses The Cloud

Espionage network GhostNet, first identified about a year ago, is much larger and more sophisticated than previously assumed according to a study entitled “Shadows in the Cloud”, by the Munk Centre for International Studies, the Information Warfare Monitor, the SecDev Group and the Shadowserver...