📜 ⬆️ ⬇️

Owners of botnets Srizbi and Storm Worm have unleashed a war

Security experts have discovered new evidence of the war being waged between the owners of the botnet Srizbi and Storm Worm. Like the mafia groups from the Clan of the Sopranos, the hackers organized a redistribution of spheres of influence. The only difference is that the criminals from the virtual world are fighting for control over tens of thousands of infected computers and use not automata, but Trojans in this war.

Trojan called Trojan.Srizbi , part of the combat pack MPack - the latest novelty hacker weapons. It not only infects the computer and makes it part of a botnet, but also tries to destroy its main rival, another Trojan Storm Worm.

This is another episode in the war of two botnets. Most recently, bots from the Storm Worm "ddosili" working server Srizbi, which was used to distribute malware. The server was disabled for the whole day. Security experts watched this attack and said that they could not reach him for a day to download the latest version of the Trojan.

It is possible that the Russians are participating in this war. According to Symantec, a group of Russian hackers is selling the hacker kit MPack. MPack is a very professionally made set of web components in PHP, designed to manage botnets. Among other tools, it includes an information panel that shows the IP addresses of all infected PCs and the list of vulnerabilities of each specific computer.
')
Srizbi’s rival is the Storm Worm network, named after the first spam they sent. This is a decentralized peer-to-peer network that is almost impossible to destroy. A set of new users occurs mainly through e-cards, by sorting through several exploit options.

via The Register

Source: https://habr.com/ru/post/11842/


All Articles