One Botnet Down, Many More To Go

Discussion in 'privacy general' started by itman, Feb 6, 2013.

Thread Status:
Not open for further replies.
  1. itman

    itman Registered Member

    Joined:
    Jun 22, 2010
    Posts:
    2,969
    Location:
    U.S.A.
  2. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,770
    Location:
    Texas
    http://blogs.technet.com/b/security...s-search-hijacking-and-click-fraud-scams.aspx
     
  3. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    6,029
    I wonder why ISPs, search engines, Microsoft etc don't warn users more often about malware infections. Google readily warns me when I use "bad" VPN exits ;)

    Does detecting botnet infections depend on first taking the botnet down?
     
  4. ComputerSaysNo

    ComputerSaysNo Registered Member

    Joined:
    Aug 9, 2012
    Posts:
    1,425
    It's a grey area. it's also a slippery slope because where do you stop?

    Remove the malware from infected machines without the consent of the user?

    It's illegal to modify files on another computer or network in most western countries so there is red tape everywhere. As there should be when your talking about modifying files without consent/notice/permission.

    On Botnets it's usually discovering the C&C servers from there you can sinkhole it. Though they are getting smarter with using encrypted reverse proxies to hide the main C&C.
     
  5. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    6,029
    Well, the last paragraph in the quote ...

    ... just says that users will be notified.

    Why are they notifying about just this botnet? Is it that other botnets, which are still working properly, can't be so readily detected?
     
  6. ComputerSaysNo

    ComputerSaysNo Registered Member

    Joined:
    Aug 9, 2012
    Posts:
    1,425

    Criminal botnets are getting smarter, in the way they hide their C&C servers often using multiple C&C's, encrypted reverse proxies (this is how the huge torrent sites, private ones work) and more P2P technologies to keep them alive.

    Government Botnets which I really do believe there a few out there will never be shut down.
     
Loading...
Thread Status:
Not open for further replies.