The Broadband Guide
SG
search advanced

Security researchers discover 'indestructible' botnet

2011-06-30 10:40 by
Tags: , ,

 

A newly-discovered botnet has infected more than 4.5 million PCs in just three months, security researchers report. About a third of the infected machines are based in the US. The TDL-4 is the rootkit of the TDSS malware that initially appeared in 2008 and now it is 'practically indestructible', being virtually undetectable by antivirus software.

In its latest version, the malware features some anti-virus capabilities and can delete around 20 of the world's most successful malware packages, including Gbot, ZeuS and Optima.

Kaspersky Labs has analysed the TDL-4:

"The changes in TDL-4 affected practically all components of the malware and its activity on the web to some extent or other. The malware writers extended the program functionality, changed the algorithm used to encrypt the communication protocol between bots and the botnet command and control servers, and attempted to ensure they had access to infected computers even in cases where the botnet control centers are shut down," says Kaspersky researcher Sergey Golovanov. "The owners of TDL are essentially trying to create an 'indestructible' botnet that is protected against attacks, competitors, and antivirus companies."

Read more -here-

 

  Post your review/comments
    rate:
   avg:
News Glossary of Terms FAQs Polls Cool Links SpeedGuide Teams SG Premium Services SG Gear Store
Registry Tweaks Broadband Tools Downloads/Patches Broadband Hardware SG Ports Database Security Default Passwords User Stories
Broadband Routers Wireless Firewalls / VPNs Software Hardware User Reviews
Broadband Security Editorials General User Articles Quick Reference
Broadband Forums General Discussions
Advertising Awards Link to us Server Statistics Helping SG About