Takedown botnet can bring valuable data
Scientists hope to get a better insight into botnets after taking certain parts Pushdo
, one of the five largest network hacked computers responsible for most of the worlds spam.
Thorsten Holz, a professor of computer science at the Ruhr-University Bochum, Germany, said that his group is working on is focused on academic work methods to find out what type of malware, send spam is on the computer that sent a particular e-mail spam.
looked at some major spam botnets, including the Mega-D, Lethic, Rustock and Pushdo and Cutwail, two types of malicious software, which sometimes seem to work together in the same botnet.
Holz said that Pushdo had a special characteristic in that more than half of its command and control servers were concentrated in a single hosting company. Botnets use a command and control server to issue commands to the infected computer, such as sending spam e-mail templates and e-mail address to send spam.
About 15 of Pushdos 30 servers, that one hosting provider, which has now taken these offline servers, and shared the data they contain from Holz and his team. Their analysis is still ongoing, but was discovered about 78 GB of plain text e-mail, and to 40% of infected computers in India, the findings of Holz said was surprising.
Other data in these servers should shed more light on the Pushdo works. We will analyze all log data because we think that we can provide a good overview of modern spam operation, Holz said.
With eight hosting providers who Pushdo command and control servers, the sixth action in order to exclude Pushdo down. But the two hosting providers based in China does not respond to email requests to turn off the Pushdo, and even acknowledged that it received a complaint, Holz said. Although the amount of spam has decreased from Pushdo, it is likely that operators will be able to ratchet it back.
But Holz and his team now know that computers are infected Pushdo. They are in contact with the ISPs to connect these computers to the Internet. ISPs can then of those customers that their computers are infected and take steps to help them clean up their machines, Holz said.
Although it is likely that Pushdo operators will be able to use other servers, which are still seen to play a botnet, or we can notify the victims of endangered plant and cleaned it, it still has a long-term impact, said Holz .
Identification of machines which are infected, and then remediating those computers is seen as crucial to the fight against botnets. In Germany, the government initiative that, in eight of the nine major Internet service providers together to send an e-mail notifying their customers that their machines could be infected with botnet code, Holz said.
Via:
Takedown botnet can bring valuable dataRelated Posting Search Result:Damballa warns against fast-growing botnet
Security Damballa company warns of a large and rapidly growing botnet created specifically for the issue of Distribu...Huge botnet spam wounded, but alive
botnet is responsible for a significant amount of spam has been paralyzed, but can dissolve in a few weeks, depending ...
Rustock botnet, responsible for 40% of spam
Over 40% of global spam originates from one network computer to computer security experts continue to battle, accordin...
AVG finds new botnet Theft MumbaAVG Scientists have discovered a botnet, which has collections of personal data and uses the latest version of the cod...
Takedown botnet can bring valuable data
By: blue98
Vodafone will not charge you for wireless transmission of data going over the limit H.E.M. ankle rehab - rehabiliation and recovery Quick Recovery After A Cycle Of Steroids Or Prohormones Like Methyl 1-d Recovery In Export Demand, Recovery Appliance Industry Growth Trends Evident Do You have A Plan To Recover From Lost Data? Could You Reverse Or Even Prevent Data Loss? The Shock Of Data Loss And Recovery How Data Recovery Companies Can Find Your Lost Files 6 Little Known Secrets To Organizing Data With SharePoint Recovery of 8904 Meters Great Wall at Huairou Hard Drive Recovery Translates Into Getting Your Documents Back Driver Data Recovery Suggestions For Rape Victims