storm worm, DDNS attacks and more
Such an interesting story this week all over the web: researchers at UC Berkley and UC San Diego spent some time this spring infiltrating a giant botnet called Storm Worm. This botnet has been estimated to send up to 20% of the spam on the Internet. So the researchers substituted their own faux phishing sites as the link targets in the spam in order to gather metrics.
The results: hundreds of millions of emails, an estimated three quarters of which were intercepted and only 28 would-be sales. On the other hand, when they tried to estimate malware-installing effectiveness it turns out that fully 10 percent of people following the link actually click on to install the payload! Conclusions: First, it takes such a low number of sales to make spam campaigns profitable that it will surely continue unabated; second, malware distribution can be accomplished effectively using the services of botnet operators. Both of these phenomena will evolve and flourish.
In other newsnetwork attacks would seem to be increasing at a faster rate than last year, according to Arbor Networks’ annual survey of ISP’s. Not only that but there is a broadening out of attack types. The main focus for concern is attacks on DNS and network infrastructure systems. DNS cache poisoning has jumped up to be the second largest threat in the eyes of respondents, exceeded only by botnets and followed closely by route hijacking. Some of the things the public usually worries about rank significantly lower: worms, identity theft, etc. And the bad news: attacks are getting more specific to networks, regions, and applications!Purchase Brahmi
Nice post. Thanks for sharing….