Forum latest

Major Disruption of Pushdo Botnet Wasn't The Original Goal
Written by Daniel   
Tuesday, 31 August 2010 18:34

From Dark Reading

Botnet's spam traffic cut by 80 percent

The researchers who successfully shut down much of the Pushdo botnet's infrastructure last week didn't go in planning to take down a large chunk of the botnet -- that was a secondary but major byproduct of some related botnet research they were conducting.



Thorsten Holz, senior threat analyst at LastLine and assistant professor of computer science at Ruhr-University Bochum, Germany, says he and his colleagues were working on a research project involving various botnets, including Pushdo, MegaD, and Rustock, matching infected IP addresses with their respective botnets. They decided to they needed C&C servers to evaluate an algorithm they were developing for the project, which ultimately led them to decide to take down some Pushdo C&C servers to assist their research, he says. "Pushdo's command and control infrastructure turns out to be pretty vulnerable to takedown efforts, so we identified the C&C servers in eight different hosting providers," Holz says. "It was the ideal target to get the servers down and analyze the data."

[More...] [Comments...]


See also

None found.

Hardware | Windows | Linux | Security | Mobile Devices | Gaming
Tech Business | Editorial | General News | folding@home

Forum | Download Files

Copyright ©2001 - 2012, AOA Forums.  All rights reserved.

Alliance of Overclocking Arts

Links monetized by VigLink

Don't Click Here Don't Click Here Either