Some Pushdo Variants Resuming Spam Operations

Some Pushdo botnet variants have resumed spam operations after an initial takedown attempt led to a decrease in spam volume. Researchers at Last Line of Defense took down 20 of the roughly 30 known command-and-control (C&C) servers, however, FireEye's follow-up analysis revealed signs of the botnet's resurgence, with the Cutwail malware downloading new spam templates from one of the remaining C&C servers. The botnet is comprised of multiple separate networks, each using similar software and connected to a finite number of C&C servers, some of which may be compromised legitimate servers. The success of the botnet's recovery attempt will depend on the community's response, as the botnet's backup servers are still operational