P2P botnets much larger than they seemed

TheKid7 · May 31, 2013

P2P botnets much larger than they seemed:

The large-scale botnets ZeroAccess and Sality apparently control more than one million infected computers using peer-to-peer communication; the well-known online banking trojan Zeus has just about reached 200,000 nodes. An international team of researchers sneaked "sensors" into the networks to determine these figures. The P2P botnets also turned out to be much more resistant than originally thought to attempts to shut them down with targeted operations.

Conventional botnets receive their orders from a central command-and-control server, which also constitutes their main weak point. If that server is shut down, the botnet master loses control of the infected computers. For some time now, newer botnets have been using decentralised peer-to-peer structures like the ones used in file-sharing networks. In this situation, the infected systems network with each other, and each zombie computer has a list of direct communication partners – its peers – which belong to the same botnet...........
Click to expand...

http://www.h-online.com/security/news/item/P2P-botnets-much-larger-than-they-seemed-1874071.html

TheKid7 · Jun 2, 2013

Peer-to-Peer Botnets Resilient to Takedown Attempts:

The FBI, Justice Department and technology companies have had success shutting down botnets that rely on a centralized infrastructure and command and control servers to communicate with bots, steal data or send malicious commands.

Peer-to-peer botnets, however, have proven more difficult to take down. More criminal gangs who ply in financial fraud, identity theft or denial-of-service attacks are investing in P2P botnets because their lack of a C&C infrastructure makes them more resilient not only against law enforcement, but security analysts who want to enumerate these networks of compromised computers or disrupt their services...........
Click to expand...

http://threatpost.com/peer-to-peer-botnets-resilient-to-takedown-attempts/

Dermot7 · Jun 5, 2013

Atlanta – June 5, 2013 – Damballa, the experts in advanced threat protection, today announced that Damballa Failsafe can now discover malicious peer-to-peer (P2P) communications. Damballa Failsafe uses behavioral detection techniques to identify malicious P2P communication attempts from malware trying to evade detection.
Click to expand...

https://www.damballa.com/press/2013_06_05PR.php

TairikuOkami · Jun 5, 2013

Most bots come from company computers, so as long as they will employ inexperienced admins (family, friends), taking one botnet down will result only in creating a new one.

TheKid7 · Jun 5, 2013

Number of Peer-to-Peer Botnets Grows 5X:

The resiliency of peer-to-peer botnets is too good to pass up for fraudsters and spam mavens tired of watching expensive and centralized command and control infrastructures be taken down by authorities and technology companies.

Botnets such as ZeroAccess, TDL4/TDSS and Zeus v3 have shown the way for peer-to-peer botnet builders, either as a primary means of communication between hackers and bots, or as a fallback in case centralized communication is disrupted or permanently terminated. Researchers at Damballa, in fact, are reporting a five-fold increase in the number malware samples spread via peer-to-peer during the past 12 months. ZeroAccess is likely the biggest offender, a potent malware family with rootkit capabilities that has been folded into a number of exploit kits, including Blackhole one of the most potent commercial kits available on the underground...........
Click to expand...

http://threatpost.com/number-of-peer-to-peer-botnets-grows-5x/

Log in or Sign up

P2P botnets much larger than they seemed

TheKid7 Registered Member

TheKid7 Registered Member

Dermot7 Registered Member

TairikuOkami Registered Member

TheKid7 Registered Member

Log in or Sign up

P2P botnets much larger than they seemed

TheKid7 Registered Member

TheKid7 Registered Member

Dermot7 Registered Member

TairikuOkami Registered Member

TheKid7 Registered Member

Useful Searches