Newsletters
Customer Relationship Management News NewsFactor Sites:       NewsFactor.com     Enterprise Security Today     CRM Daily     Business Report     Sci-Tech Today  
   
Home CRM Systems Customer Service Business Intelligence Sales & Marketing More Topics...
Vblock™ Systems:
Advanced converged infrastructure
increases productivity & lowers costs.

www.vce.com
Network Security
24/7/365 Network Uptime!
Average Rating:
Rate this article:  
Microsoft Leads Strike Against Massive ZeroAccess Botnet
Microsoft Leads Strike Against Massive ZeroAccess Botnet

By Jennifer LeClaire
December 6, 2013 10:05AM

Bookmark and Share
Regarding Microsoft's strike at the ZeroAccess botnet, says security engineer Ken Pickering, “I believe the goal for Microsoft is to raise the daily expenses for the botnet owner [like ZeroAccess'] to the point where the risk and cost can no longer be sustained. Taking key IP addresses away from the bad guys will force them to exert much more effort in order to maintain their precious botnet.”
 


Microsoft is once again flexing its cybercrime-fighting muscles. For the third time this year, Redmond’s Digital Crimes Unit has disrupted a dangerous botnet that has impacted millions of consumers.

Microsoft worked with Europol’s European Cybercrime Centre (EC3), the Federal Bureau of Investigation and technology industry leaders like A10 Networks, to take down the rampant Sirefef botnet. Also known as ZeroAccess, the botnet has infected nearly 2 million computers all over the world and cost online advertisers upwards of $2.7 million each month.

According to Microsoft, ZeroAccess targets all major search engines and browsers, including Google, Bing and Yahoo. Most of the infected machines are in the U.S. and Western Europe. Microsoft is comparing ZeroAccess to the Bamital botnet, which the company and its partners took down in February, in that it is responsible for hijacking search results and directing people to potentially dangerous Web sites that could install malware onto their computer, steal their personal information or fraudulently charge businesses for online advertisement clicks. ZeroAccess also commits click fraud.

Not Completely Dead

“Due to its botnet architecture, ZeroAccess is one of the most robust and durable botnets in operation today, and was built to be resilient to disruption efforts, relying on a peer-to-peer infrastructure that allows cybercriminals to remotely control the botnet from tens of thousands of different computers,” Microsoft wrote in a blog post.

Most often, the company said, computers become infected with ZeroAccess as a result of what are known as drive-by-downloads -- cybercriminals create a Web site that downloads malware onto any unprotected computer that happens to visit that site. Microsoft said computers can also become infected through counterfeit and unlicensed software, where criminals disguise ZeroAccess as legitimate software, tricking a person into downloading the ZeroAccess malware onto their computer.

“Because of the sophistication of the threat, Microsoft and its partners do not expect to fully eliminate the ZeroAccess botnet,” the company said. “However, we do expect this legal and technical action will significantly disrupt the botnet’s operation by disrupting the cybercriminals’ business model and forcing them to rebuild their criminal infrastructure, as well as preventing victims’ computers from committing the fraudulent schemes.”

Cleaning Up Messes

We caught up with Tommy Chin, a technical support engineer at CORE Security, to get his feedback on the operation. He told us Microsoft deserves an A for effort.

“It is not a simple task to take down a decentralized botnet. However, Microsoft's DCU seems to be motivated and their drive to team up with the right law enforcement agencies sounds really promising,” Chin said. (continued...)

1  |  2  |  Next Page >

 

Tell Us What You Think
Comment:

Name:

Dawesi:

Posted: 2013-12-16 @ 4:28pm PT
"but we’d also be better off writing less exploitable operating systems and educating users to avoid building these networks"

Good to see quotes from people who understand security. If you can write it, you can hack it. Period. If it's written, people will find a hole, people are paid to do this everyday (good people that is), then the bad people exploit the known holes.



Your Next Generation Data Center Is Here! Vblock™ Systems: the world's most advanced converged infrastructure are built on the Cisco Unified Computing System with Intel® Xeon® processors. Vblock™ Systems deliver extraordinary time to market, ROI and TCO, and flexibility to meet your continually changing demands with 5X faster deployment, 96% less downtime, and 1/2 the cost. Click here to learn more.


 Network Security
1.   Michaels: Nearly 3M Cards Breached
2.   Heartbleed Could Cost Millions
3.   Google Street View Unravels CAPTCHAs
4.   Teen Arrested for Heartbleed Hack
5.   IBM Adds Disaster Recovery to SoftLayer


advertisement
Michaels: Nearly 3M Cards Breached
But the hack has been contained.
Average Rating:
Heartbleed Could Cost Millions
But it could have been prevented.
Average Rating:
Don't Reset Passwords for Heartbleed?
Added caution needed to ensure security.
Average Rating:
Product Information and Resources for Technology You Can Use To Boost Your Business

Network Security Spotlight
Michaels Says Nearly 3M Credit, Debit Cards Breached
Arts and crafts retail giant Michaels Stores has confirmed that a data breach at its POS terminals from May 2013 to Jan. 2014 may have exposed nearly 3 million customer credit and debit cards.
 
Heartbleed Could Cost Millions, Could Have Been Prevented
Early estimates of Heartbleed’s cost to enterprises are running in the millions. The reason: revoking all the SSL certificates the bug leaked will come at a very hefty price.
 
Google's Street View Software Unravels CAPTCHAs
The latest software Google uses for its Street View cars to read street numbers in images for Google Maps works so well that it also solves CAPTCHAs, those puzzles designed to defeat bots.
 

Enterprise Hardware Spotlight
Vaio Fit 11A Battery Danger Forces Recall by Sony
Using a Sony Vaio Fit 11A laptop? It's time to send it back to Sony. In fact, Sony is encouraging people to stop using the laptop after several reports of its Panasonic battery overheating.
 
Continued Drop in Global PC Shipments Slows
Worldwide shipments of PCs fell during the first three months of the year, but the global slump in PC demand may be easing, with a considerable slowdown from last year's drops.
 
Google Glass Finds a Home in Medical Education, Practice
Google Glass may find its first markets in verticals in which hands-free access to data is a boon. Medicine is among the most prominent of those, as seen in a number of Glass experiments under way.
 

Mobile Technology Spotlight
Google Releases Chrome Remote Desktop App for Android
You're out on a sales call, and use your Android mobile device to grab a file you have back at the office on your desktop. That's a bit easier now with Google's Chrome Remote Desktop app for Android.
 
Amazon 3D Smartphone Pics Leaked
E-commerce giant Amazon is reportedly set to launch a smartphone after years of development. Photos of the phone, which may feature a unique 3D interface, were leaked by tech pub BGR.
 
Zebra Tech Buys Motorola Enterprise for $3.45B
Weeks after Lenovo bought Motorola Mobility’s assets from Google for $2.91 billion, Zebra Technologies is throwing down $3.45 billion for Motorola’s Enterprise business in an all-cash deal.
 

Navigation
CRM Daily
Home/Top News | CRM Systems | Customer Service | Business Intelligence | Sales & Marketing | Contact Centers | Customer Data | CRM Press Releases
NewsFactor Network Enterprise I.T. Sites
NewsFactor Technology News | Enterprise Security Today | CRM Daily

NewsFactor Business and Innovation Sites
Sci-Tech Today | NewsFactor Business Report

NewsFactor Services
FreeNewsFeed | Free Newsletters | XML/RSS Feed

About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2014 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo. Member of Accuserve Ad Network.