Infected Windows 7 RC forms new botnet

Damballa security experts warn of the emergence of a new botnet, the formation of which is the responsibility of the pirated version of the release candidate Windows 7, infected with a trojan.

According to the company, the first computers in the new network appeared on April 24, and from the first days of May the network is expanding at a speed of several hundred new computers per hour.

On May 10, Damballa recorded the appearance on the network of a command server that transmitted management commands to hacked computers. Now the botnet has up to 27 thousand infected machines, each of which, without the knowledge of the owner, is trying to download additional malicious components from the Internet.

Damballa specialists managed to identify the command center of the network of “zombie” computers and stop the connection to the botnet of new nodes. However, attackers can still control previously infected machines. Trojan-infected PCs are distributed throughout the world: approximately one-tenth of them are located in the United States, another seven percent in the Netherlands and Italy.
')
It is possible that in the future cybercriminals will try to use a botnet to organize DoS-attacks or to send spam.
securitylab