- Jan 24, 2011
- 9,378
A security researcher has identified a new pharma spam botnet which uses fast-flux technologies in order to increase its resiliency to takedown attempts.
Dubbed "Wibimo," the botnet was discovered by Joe Stewart, director of malware research at Dell's SecureWorks Counter Threat Unit, who presented it at the recent RSA security conference.
"I don't think it's huge. But if feels like a new botnet. It doesn't mesh with what we've seen," said Stewart, who, according to Darkreading, finished analyzing the malware shortly before his talk.
The fast-flux technology involves quickly rotating DNS records using a pool of IP addresses, so that if one of them is taken down, the hostname doesn't go offline.
More details - link
Dubbed "Wibimo," the botnet was discovered by Joe Stewart, director of malware research at Dell's SecureWorks Counter Threat Unit, who presented it at the recent RSA security conference.
"I don't think it's huge. But if feels like a new botnet. It doesn't mesh with what we've seen," said Stewart, who, according to Darkreading, finished analyzing the malware shortly before his talk.
The fast-flux technology involves quickly rotating DNS records using a pool of IP addresses, so that if one of them is taken down, the hostname doesn't go offline.
More details - link
