Posts Tagged ‘configuration files’

FAQ: Disabling the new Hlux/Kelihos Botnet

Mar

2012

Q: What is the Hlux/Kelihos botnet? A: Kelihos is Microsoft’s name for what Kaspersky calls Hlux. Hlux is a peer-to-peer botnet with an architecture similar to the one used for the Waledac botnet. It consists of layers of different kinds of nodes: controllers, routers and workers. Q: What is a peer-to-peer botnet? A: Unlike a […]

Category General Written by Securelist / Blog 0 Comments

Compromised WordPress sites Drive Users to Blackhole Exploit Kit

Mar

2012

We were alerted to reports of a mass compromise of WordPress sites that lead to CRIDEX infection. To lure users to these compromised sites, the cybercriminals behind this employed spammed messages purporting to come from known legitimate sources such Better Business Bureau and LinkedIn, just to name a few. These spam use social engineering tactics […]

Category General Written by TrendLabs 0 Comments

Zeusbot/Spyeye P2P Updated, Fortifying the Botnet

Feb

2012

We blogged about a parallel Zeusbot/Spyeye build near the end of last year that introduced some improvements in the botnet, moving the network architecture away from a simple bot-to-C&C system and introducing the beginnings of a peer-to-peer model. This new variant new uses P2P communication exclusively in order to keep the botnet alive and gathering […]

Category General Written by Symantec Security Response Blog 0 Comments

The Latest in IT Security

Posts Tagged ‘configuration files’

FAQ: Disabling the new Hlux/Kelihos Botnet

Zeusbot/Spyeye P2P Updated, Fortifying the Botnet

Categories

Featured

Archives

Latest Comments

About Us

Contact Us