Researcher Identifies New Fast-Flux Botnet

Status
Not open for further replies.

Jack

Administrator
Thread author
Verified
Staff Member
Well-known
Jan 24, 2011
9,377
A security researcher has identified a new pharma spam botnet which uses fast-flux technologies in order to increase its resiliency to takedown attempts.

Dubbed "Wibimo," the botnet was discovered by Joe Stewart, director of malware research at Dell's SecureWorks Counter Threat Unit, who presented it at the recent RSA security conference.

"I don't think it's huge. But if feels like a new botnet. It doesn't mesh with what we've seen," said Stewart, who, according to Darkreading, finished analyzing the malware shortly before his talk.

The fast-flux technology involves quickly rotating DNS records using a pool of IP addresses, so that if one of them is taken down, the hostname doesn't go offline.

More details - link
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top