Botnet
Closing down botnets is becoming increasingly difficult

MessageLabs spots resilient new breed of botnets

Latest examples can recover from shut down in just 48 hours

Phil Muncaster

Activity levels for Cutwail, one of the world's largest botnets, fell by 90 per cent after the recent shutdown of a Latvian ISP, but sprung back within just 48 hours, according to MessageLabs.

The security firm's latest Intelligence report makes for worrying reading, particularly concerning the increasing resilience of botnets.

Advertisement

By contrast, when the McColo web hosting firm was shut down in November last year it took the associated botnet activity several weeks to fully recover.

"The impact when the ISP in Latvia was taken offline was almost immediate but only lasted a short time. Within 48 hours it was back up and running, which is a worrying trend," said senior MessageLabs analyst Paul Wood. "A lot of efforts are being made behind the scenes to make them harder to take down."

Botnet herders are increasingly looking to peer-to-peer channels, distributed chat room and server operations and even HTTP traffic to manage and update the botnets and make them more difficult to track and take down, according to Wood.

"It needs increased law enforcement and greater [industry] co-operation," he said. "Anyone can set up an ISP, so it's often difficult to identify the bad ones from those which are genuinely struggling with the problems on their networks because they only have a small abuse department."

The report also highlighted the continued use of shortened URLs in spam emails, sent primarily from the Donbot botnet, as well as a 44.7 per cent increase in web-based malware since July, representing 3,510 new infected web sites every day.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Do you agree?

Further reading

twitter logo

Twitter used to control botnets

Researchers find command and control structures in Twitter accounts

IE icon

IE8 reaches 80 million malware blocks

New filtering technology shows the extent of socially engineered malware

Web attacks surge by a third

Increase in data-theft Trojans spells trouble for organisations

Authorities shut down notorious ISP Real Host

Estonian hosting firm had been linked to botnets and phishing scams

Related whitepapers

Related jobs

Most watched

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

V3.co.uk weekly debrief, 5 Feb 2010

This week we cover the continuing controversy surrounding the Orange T-Mobile deal

Analysis and Reports

Using managed services to protect mobile data users from the latest security threats

Counting the cost of data security: the benefits of secured mobile services

Shifting Disaster Recovery targets with SharePoint and SQL server configurations

Using a hostbased recovery system for mission-critical systems

Poll

Adobe Flash poll

Adobe Flash poll

Do you agree with Steve Jobs about Flash being buggy?

View poll results

Advertisement

White paper library

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Spotlight

Neil Sanderson

Interview: Microsoft UK virtualisation chief Neil Sanderson

Sanderson outlines Microsoft's plans for Hyper-V, cloud computing and virtual...

Google

Google moves into social networking with Buzz

Facebook gets opposition in consumer and enterprise spheres

Nvidia

Nvidia pitches Optimus as prime notebook platform

New system pairs onboard and discrete chips

OpenDNSSEC

OpenDNSSEC service goes live

New security project encrypts Domain Name System traffic

Primary Navigation