Lavasoft News - June 2007

Botnets Grow in Size and Sophistication

Botnets, networks of thousands of computers used to spread malware, have become the hottest commodity of cyber criminals. Malicious code, as dangerous as it is, has taken a back seat to the means to deliver it. As a result, hackers and spammers are no longer the sole leading figures responsible for perpetrating cyber crime.

Botnet controllers are responsible for pulling the strings of an increasingly professional and sophisticated cyber crime community. Emerging as a new serious brand of player, they are threatening the very openness of the Internet that we have come to take for granted.

Botnets have the ability to attack the Internet en masse. As a result, the frequency and complexity of attacks is escalating. Another contributing factor is the professionalism displayed by the cyber criminals.

An example of this was recently reported on PC World. Security firm Panda Software discovered an innovative application called Zunker, which was used to control and monitor botnet computers in as many as 54 countries. The tool had been designed to be easy to use and allowed the owner the ability to tune the performance of the network.

As another sign of sophistication, security researchers have found that a growing number of botnets are being used only once. The botnet controller rents the network to the highest bidder and, once an attack is completed, abandons it. This strategy makes it more difficult for law enforcement to track the botnet controllers, or ‘bot herders’ as they are also called.

Bringing those criminals to justice, though difficult, is not impossible. Witness the sentencing of Jeanson Ancheta, 21, of California to a term of 57 months in a federal prison. Ancheta, a bot herder, controlled and rented 400,000 computers to other cyber criminals who used the network to launch security attacks.

Contributing to the problem is the large number of home users whose computers do not have adequate protection and are easy prey for botnet operators. It is critical that home users install up-to-date firewalls and security software, in addition to practicing caution when going online.

Notwithstanding all the challenges ahead, security experts remain optimistic that the botnet threat can be mitigated without having to alter how we currently use the Internet. The prospect of a closed Internet is not something that would benefit anyone, cyber criminals included.

Home   arrow

Lavasoft recommends SpeedUpMyPC - Buy Now for $29.95
Computer users are safety savvy when it comes to understanding potential threats coming in through their e-mail inboxes, like phishing, viruses, and malware. Results from an E-mail Sender and Provider Coalition survey show that over 80 percent of users recognize and report spam through functions in their e-mail service. Yet, it only takes one e-mail user in 10,000 to buy something from a spammer to keep them in business.

Source: Network World
Term of the Month
RSS is a type of web feed format used to publish constantly updated web-based content like blogs and news feeds. RSS stands for Really Simple Syndication, and can also refer to Rich Site Summary or RDF Site Summary. RSS delivers information as an XML file called an RSS feed or webfeed. By subscribing to a website's RSS feed, new content from that site is retrieved and presented to the computer user through their feed reader or feed aggregator program.

Tech Tips
It can be difficult and time consuming to keep track of all the news available on the web. Sign up for RSS feeds to stay up-to-date with news from your favorite websites. RSS is a convenient way to distribute news, plus it allows you to control the amount of data you receive online and decrease your online traffic, saving you time by not having to visit individual sites. To use RSS feeds, simply choose an RSS reader tool and then load RSS feeds into your reader from the sites you are interested in.

Lavasoft's Company Blog and the News from Research blog have RSS feeds up and running. By subscribing to the News from Research blog, you will be notified whenever a new Definitions File is released.
Helpful Homepage
Stop is a "neighborhood watch" group dedicated to fighting badware - spyware, malware and deceptive adware. Educate yourself by reading their in-depth reports on applications and websites, or fight back by submitting your badware story to aid their clearinghouse effort.
Lavasoft AB
Lilla Bommen 1
411 04 Gothenburg