Gumblar: New Generation of Self-Building Botnets

We’ve been looking at the infrastructure of the Gumblar malware and found some curious facts on how Gumblar operates which we would like to share to make hosting owners aware of the Gumblar threat. Analysis of some infected websites showed that the only way to inject the infection of Gumblar was ...

4553 Parasite Mothership Backdoor Detection

The backdoor software '4553' seems to be installed on this host, which indicates it has been compromised. This script was written by Chris Gragsone This script is for finding hosts that are running the 4553 parasite "mothership" include"compat.inc"; ifdescription scriptid11187;...