funsec mailing list archives

Maintainers of 100,000+ computer botnet arrested


From: "Fergie (Paul Ferguson)" <fergdawg () netzero net>
Date: Fri, 7 Oct 2005 18:15:42 GMT

Via the Kaspersky Lab Blog.

[snip]

The Dutch police have arrested three men who are suspected to have set up a botnet of more than 100 000 computers 
worldwide.

The botnet was used to steal confidential information such as creditcard and banking data as well as to conduct DDoS 
attacks.

The malware used by the hackers was based on Backdoor.Win32.Codbot(an IRCBot), which was regularly altered to avoid 
detection by virusscanners.

It's also likely that they were making malware which can spy on login info for online banking, for which they were paid.

Alledgedly they also blackmailed a company in the US, threatening to take down their website by DDoS.

Next to these things it's also probable that they were breaking into PayPal and eBay accounts.

The prime suspect is 19 years old, the others are 22 and 27. More arrests are likely to follow.

[snip]

http://www.viruslist.com/en/weblog?weblogid=171694326

- ferg


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg () netzero net or fergdawg () sbcglobal net
 ferg's tech blog: http://fergdawg.blogspot.com/

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: