For more than a year one of the most productive spam botnets, Waledac, has continued to exist. There was already more than one modification of this Trojan. In ESET anti-virus databases, it is known as
Win32 / Waledac .
You, probably, have already heard the mention of Waledac more than once, as almost no holiday last year did not go without sending
spam with this malicious program inside. According to our
measurements , a botnet created using the Waledac program can send out about several billion spam emails every day. The protocol of network interaction of this botnet was analyzed by independent researchers and
published in November last year at the European Conference on Computer Network Defense.
Today, Microsoft's official blog has
information about blocking 277 domain names in the .com zone, which acted as command centers for this botnet. This is due to the official
complaint of the company filed in a US court. I note that for all these domains, hosting services were provided by
Verisign , which so far refrains from any comments on this matter.
')
Thus, MS is trying to block the ability of bots to receive new commands from control centers, and we all hope that the activity of this botnet will decline. If this method of struggle turns out to be effective, then perhaps it will be the first step that will allow countering such threats not only at the technical level, but also at the legal level. True, unfortunately, this small victory has nothing to do with our Russian legislation, but perhaps it will mark a new trend to combat botnets.