Wednesday, December 26, 2007

RBN: New and Improved Storm Botnet for 2008

Via RBN Exploit.

Obviously the Russian Business Network (RBN) is working overtime during the Christmas and New Year holiday, no doubt planning for many in the ISP security and anti-spam arena to be on skeleton staff.

Many will now have already seen reports of the Storm Botnet outbreak which started on December 24th “MerryChristmasDude” with good write up at ComputerWorld and for technical details at ISC Sans or HolisticInfoSec (links on footer). This picture is changing rapidly and by December 26th there were new web sites “Uhavepostcard” , “HappyCards2008” and no doubt more to come over the next few days.


Three of the key web sites have the following registrant information, all registered via “ANO REGIONAL NETWORK INFORMATION CENTER DBA RU (Russia)” in chronological order:

  • Domain Name: MERRYCHRISTMASDUDE.COM - Creation Date: Nov 27 2007
  • Domain Name: UHAVEPOSTCARD.COM - Creation Date: Dec 23 2007
  • Domain Name: HAPPYCARDS2008.COM - Creation Date: Dec 26 2007

More here.

0 Comments:

Post a Comment

<< Home