An analysis of Dorkbot's infection vectors (part 1)

ronjor · Nov 14, 2012

msft-mmpc

Malware nowadays benefits from the complexity of the Internet ecosystem to infect new computers through vectors such as browser plugins, social networks, and instant messaging programs.

In this two-parter series, we'll look at Worm:Win32/Dorkbot, a prevalent worm with the capabilities of an IRC backdoor and a password stealer. Dorkbot relies both on social engineering attacks and on methods that don't require human intervention, such as infected removable drives and drive-by downloads. This versatility has contributed to a spike in Dorkbot detections in the last year and a half: over 28 million detections of Dorkbot have been reported since we saw this malware family in April of 2011, as seen in Figure 1.
Click to expand...

https://blogs.technet.com/b/mmpc/ar...infection-vectors-part-1.aspx?Redirected=true

tej · Nov 15, 2012

Very interesting read. Thanks.

siljaline · Nov 21, 2012

An analysis of Dorkbot’s infection vectors (part 2)
http://blogs.technet.com/b/mmpc/arc...is-of-dorkbot-s-infection-vectors-part-2.aspx

Log in or Sign up

An analysis of Dorkbot's infection vectors (part 1)

ronjor Global Moderator

tej Registered Member

siljaline Registered Member

Log in or Sign up

An analysis of Dorkbot's infection vectors (part 1)

ronjor Global Moderator

tej Registered Member

siljaline Registered Member

Useful Searches