NOW READ THIS
("Security Advisory")
Submitted by: Bill Hickey
NCVA List Master
NRT-0311 Botnets Kept Small, Operations Use Swarm Tactics:
Criminals are splitting their botnets into smaller groups in a bid to create multi-swarm attacks
that can escape detection, according to an online press report citing warnings by security firms
Finjan and F-Secure. "F-Secure's assertion is in line with our own trends analysis," said Yuval
Ben-Itzhak, chief technology officer at Finjan. According to Finjan's quarterly security trends
report, there are numerous new attack vectors that raise the number of Trojan infections that
create botnets. "The focus has now moved on to the crimeware toolkits that generate the infections
more easily and with greater force. The resultant botnet swarm potential from such infections is
significant," said Ben-Itzhak. Ben-Itzhak warned that botnets are being rented out for as little
as $100 for a few hours. "By escaping detection in this way, criminals can effectively fly their
rented botnets under the security radar, and ensure that the swarm hits the relevant web sites with
devastating results. This is a potentially serious evolution in the world of botnets," he added.
(vnunet.com 02OCT07)