Friday, August 18, 2006

Botnet eavesdropping

When Joe Stewart spotted a variant of the Mocbot Trojan hijacking unpatched Windows machines for use in IRC-controlled botnets, he immediately went to work trying to pinpoint the motive for the attacks. Stewart, a senior security researcher with LURHQ's Threat Intelligence Group, set up a way to silently spy on the botnet's command-and-control infrastructure, and his findings suggest that <A HREF="http://www.eweek.com/article2/0,1895,2004893,00.asp?kc=EWNAVEMNL081806EOAD">for-profit spammers are clearly winning</A> the cat-and-mouse game against entrenched anti-virus providers.

News Timeline



From Our Sponsor