Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.

Symantec and Microsoft work together to disrupt botnet
Posted on 8-Feb-2013 13:22. | Tags Filed under: News.



Symantec and Microsoft have joined forces to successfully tackle the Bamital botnet, which helped cyber gangs steal more than US$1.1 million annually.

Symantec has been tracking this botnet since late 2009 and recently partnered with Microsoft to identify and shut down all known components vital to the botnet's operation.

Bamital is a malware family whose primary purpose is to hijack search engine results, redirecting clicks to an attacker controlled command-and-control (C&C) server. The C&C server redirects the results to websites of the attackers' choosing.

Bamital also has the ability to click on advertisements without user interaction. This results in poor user experience when using search engines along with an increased risk of further malware infections.

The malware’s origin can be tracked back to late 2009 and has evolved through multiple variations over the past couple of years. Bamital has primarily propagated through drive-by-downloads and maliciously modified files in peer-to-peer (P2P) networks.

From analysis of a single Bamital C&C server over a six-week period in 2011 we were able to identify more than 1.8 million unique IP addresses communicating with the server, and an average of three million clicks being hijacked on a daily basis.

Recent information from the botnet shows the number of requests reaching the C&C server to be well over one million per day.

Clickfraud, the name used for the type of fraud committed by Bamital, is the process of a human or automated script emulating online user behaviour and clicking on online advertisements for monetary gain.

Bamital redirected end users to ads and content which they did not intend to visit. It also generated non-human initiated traffic on ads and websites with the intention of getting paid by ad networks. Bamital was also responsible for redirecting users to websites peddling malware under the guise of legitimate software.

Bamital is just one of many botnets that utilise clickfraud for monetary gain and to foster other cybercrime activities. Many of the attackers behind these schemes feel they are low risk as many users are unaware that their computers are being used for these activities.


More information: http://www.norton.com/bamital...
comments powered by Disqus


Trending now »

Hot discussions in our forums right now:

Helmet mounted spotlights - legality?
Created by MikeAqua, last reply by Athlonite on 26-May-2015 23:58 (27 replies)
Pages... 2


New Car - Old Car - Decisions, Decisions
Created by nzkiwiman, last reply by mattwnz on 26-May-2015 23:54 (26 replies)
Pages... 2


Changing of our flag , Yes or No.
Created by Presso, last reply by Geektastic on 25-May-2015 16:50 (142 replies)
Pages... 8 9 10


Best UFB Provider? Spark, Vodafone or Snap?
Created by trakman, last reply by trakman on 26-May-2015 23:30 (19 replies)
Pages... 2


Wanting a virtual cell phone for iOS and desktop, looking at 2Talk, but SMS costs and functionality unclear.
Created by Baboon, last reply by richms on 23-May-2015 04:17 (38 replies)
Pages... 2 3


Advice on employer compelling employee to sign extra limitations to a permanent contract?
Created by PhantomNVD, last reply by PhantomNVD on 26-May-2015 23:25 (17 replies)
Pages... 2


MySky HDi & LG 4K TV
Created by matt17, last reply by Malingo on 26-May-2015 21:02 (17 replies)
Pages... 2


Geekzone giveaway: Samsung Wireless Audio-Multiroom M7
Created by freitasm, last reply by dolsen on 26-May-2015 15:41 (45 replies)
Pages... 2 3