Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Storm botnet gets profiled at Web site

Secure Computing uses sensors around globe to track Storm
By Ellen Messmer , Network World , 01/15/2008

Storm, which has grown into a large remotely controlled botnet since the initial worm appeared a year ago to infect victims' machines, is getting a graphic profile on a Web site set up to track it.

StormTracker on Secure Computing's TrustedSource.org research portal displays real-time information compiled through sensors maintained in 75 countries. According to Dmitri Alperovitch, director of intelligence analysis and hosted security at Secure Computing's TrustedSource Labs, Storm has morphed into a botnet capable of various tasks, such as sending spam, establishing malicious Web pages or carrying out phishing attacks.

"In the last couple of days, it has conducted phishing attacks against Barclays Bank and the Bank of Nova Scotia," Alperovitch says. "It's a fast-flux network with thousands of machines around the world, and it's grown so that it's almost impossible to shut down."

Secure Computing believes that the Storm botnet is operated by individuals in Russia, based on the firm's analysis and registration of domain names, but wouldn't provide specifics.

Alperovitch says the StormTracker site is intended to inform security managers about the botnet's current shape and provide them with information they may wish to use to filter Internet access. The information Secure Computing is compiling is generated dynamically using the firm's Trusted Source Reputation System.

Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask to prospective vendors to get the right endpoint solution.

Download the white paper.

Unauthorized applications: Taking back control

Employees installing and using unauthorized applications like IM, VoIP, games and peer-to-peer file-sharing applications cause many businesses serious concern. How do you control these applications?

Download the white paper.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to moderator approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed
Save The Date!
What They Are Saying

In all of these letters that you have posted, Chuck, I have yet to see one that apologizes to PZ Myers...- bullet

Join the Discussion