Comments on: Dozens of ZeuS Botnets Knocked Offline http://krebsonsecurity.com/2010/03/dozens-of-zeus-botnets-knocked-offline/ In-depth security news and investigation Wed, 23 May 2012 04:43:41 +0000 hourly 1 http://wordpress.org/?v=3.3.2 By: Researchers Map Multi-Network Cybercrime Infrastructure « Signal, No Noise http://krebsonsecurity.com/2010/03/dozens-of-zeus-botnets-knocked-offline/comment-page-1/#comment-4217 Researchers Map Multi-Network Cybercrime Infrastructure « Signal, No Noise Thu, 18 Mar 2010 13:16:58 +0000 http://www.krebsonsecurity.com/?p=1672#comment-4217 [...] week, security experts launched a sneak attack to disconnect Troyak, an Internet service provider in Eastern Europe that served as a global [...] [...] week, security experts launched a sneak attack to disconnect Troyak, an Internet service provider in Eastern Europe that served as a global [...]

Like or Dislike: Thumb up 0 Thumb down 0
]]> By: Researchers Map Multi-Network Cybercrime Infrastructure — Krebs on Security http://krebsonsecurity.com/2010/03/dozens-of-zeus-botnets-knocked-offline/comment-page-1/#comment-4076 Researchers Map Multi-Network Cybercrime Infrastructure — Krebs on Security Wed, 17 Mar 2010 13:03:22 +0000 http://www.krebsonsecurity.com/?p=1672#comment-4076 [...] topic. You may also subscribe by email in the sidebar ⇉ Last week, security experts launched a sneak attack to disconnect Troyak, an Internet service provider in Eastern Europe that served as a global [...] [...] topic. You may also subscribe by email in the sidebar ⇉ Last week, security experts launched a sneak attack to disconnect Troyak, an Internet service provider in Eastern Europe that served as a global [...]

Like or Dislike: Thumb up 0 Thumb down 0
]]> By: BrianKrebs http://krebsonsecurity.com/2010/03/dozens-of-zeus-botnets-knocked-offline/comment-page-1/#comment-4030 BrianKrebs Wed, 17 Mar 2010 01:51:16 +0000 http://www.krebsonsecurity.com/?p=1672#comment-4030 It's Virginia. I'll add it to the story It’s Virginia. I’ll add it to the story

Like or Dislike: Thumb up 1 Thumb down 0
]]> By: A http://krebsonsecurity.com/2010/03/dozens-of-zeus-botnets-knocked-offline/comment-page-1/#comment-3868 A Mon, 15 Mar 2010 18:09:13 +0000 http://www.krebsonsecurity.com/?p=1672#comment-3868 Just picking nits... Brian, you have a global readership, so please don't be lazy with locations! ;-) "Andy Fried, owner of Deteque, a computer security consultancy in Alexandria, " *Virginia/Egypt/?/*. Just picking nits…

Brian, you have a global readership, so please don’t be lazy with locations! ;-)

“Andy Fried, owner of Deteque, a computer security consultancy in Alexandria, ” *Virginia/Egypt/?/*.

Like or Dislike: Thumb up 1 Thumb down 0
]]> By: yep http://krebsonsecurity.com/2010/03/dozens-of-zeus-botnets-knocked-offline/comment-page-1/#comment-3718 yep Fri, 12 Mar 2010 12:49:01 +0000 http://www.krebsonsecurity.com/?p=1672#comment-3718 What it means, is that all the snake oil salesmen and rats you talk to still have jobs. Parasites of another culture. What it means, is that all the snake oil salesmen and rats you talk to still have jobs. Parasites of another culture.

Like or Dislike: Thumb up 0 Thumb down 0
]]> By: The Italian Honey Project » The recent ZeuS and Koobface trends fluctation http://krebsonsecurity.com/2010/03/dozens-of-zeus-botnets-knocked-offline/comment-page-1/#comment-3708 The Italian Honey Project » The recent ZeuS and Koobface trends fluctation Fri, 12 Mar 2010 09:46:33 +0000 http://www.krebsonsecurity.com/?p=1672#comment-3708 [...] via Dozens of ZeuS Botnets Knocked Offline — Krebs on Security. [...] [...] via Dozens of ZeuS Botnets Knocked Offline — Krebs on Security. [...]

Like or Dislike: Thumb up 0 Thumb down 0
]]> By: AlphaCentauri http://krebsonsecurity.com/2010/03/dozens-of-zeus-botnets-knocked-offline/comment-page-1/#comment-3661 AlphaCentauri Thu, 11 Mar 2010 18:00:10 +0000 http://www.krebsonsecurity.com/?p=1672#comment-3661 If this was coordinated by law enforcement or a private security group, they might have chosen not to trumpet their success, knowing that Troyak could still find another upstream. They might want to hold off until there is more to celebrate. Or they might want to just have the private satisfaction of victory without giving the ZeuS operators anyone to target for the type of harassment they gave Roman Hüssy last year: http://voices.washingtonpost.com/securityfix/2009/05/zeustracker_and_the_nuclear_op.html But the fact that anyone cut off Troyak after allowing it to host criminals this long means that there has been a change in attitude affecting their upstream. There is one less bulletproof haven for companies like them. It means one less internet provider that doesn't understand the difference between global free speech and operating a botnet that is used to commit crimes and trash people's computers. As the legitimate companies become more knowledgeable and the criminals become sequestered to a few truly amoral hosts, it does become practical to talk about quarantining all traffic from those hosts.

If this was coordinated by law enforcement or a private security group, they might have chosen not to trumpet their success, knowing that Troyak could still find another upstream. They might want to hold off until there is more to celebrate. Or they might want to just have the private satisfaction of victory without giving the ZeuS operators anyone to target for the type of harassment they gave Roman Hüssy last year:
http://voices.washingtonpost.com/securityfix/2009/05/zeustracker_and_the_nuclear_op.html

But the fact that anyone cut off Troyak after allowing it to host criminals this long means that there has been a change in attitude affecting their upstream. There is one less bulletproof haven for companies like them. It means one less internet provider that doesn’t understand the difference between global free speech and operating a botnet that is used to commit crimes and trash people’s computers.

As the legitimate companies become more knowledgeable and the criminals become sequestered to a few truly amoral hosts, it does become practical to talk about quarantining all traffic from those hosts.

Well-loved. Like or Dislike: Thumb up 4 Thumb down 0
]]> By: romans http://krebsonsecurity.com/2010/03/dozens-of-zeus-botnets-knocked-offline/comment-page-1/#comment-3651 romans Thu, 11 Mar 2010 17:09:27 +0000 http://www.krebsonsecurity.com/?p=1672#comment-3651 stupid info ) info about TROYAK TROYAK works up and its very strong company) see y back Hidden due to low comment rating. Click here to see.

Poorly-rated. Like or Dislike: Thumb up 0 Thumb down 8
]]> By: Rick http://krebsonsecurity.com/2010/03/dozens-of-zeus-botnets-knocked-offline/comment-page-1/#comment-3646 Rick Thu, 11 Mar 2010 16:08:19 +0000 http://www.krebsonsecurity.com/?p=1672#comment-3646 It's a good theory. Only 23% of Zeus infections are detectable. Maybe they're working on improving that. Bk certainly hasn't been friendly to them. If they can come up with a new variant that stays under the radar as well as this one - with a 0% detection rate to start with... Sounds like a great idea. 'I'm a botnet operator and Windows was my idea.' ;) It’s a good theory. Only 23% of Zeus infections are detectable. Maybe they’re working on improving that. Bk certainly hasn’t been friendly to them. If they can come up with a new variant that stays under the radar as well as this one – with a 0% detection rate to start with… Sounds like a great idea. ‘I’m a botnet operator and Windows was my idea.’ ;)

Like or Dislike: Thumb up 1 Thumb down 2
]]> By: Rick http://krebsonsecurity.com/2010/03/dozens-of-zeus-botnets-knocked-offline/comment-page-1/#comment-3645 Rick Thu, 11 Mar 2010 16:05:22 +0000 http://www.krebsonsecurity.com/?p=1672#comment-3645 Oh I think the botnets are doing fine, thank you. They're still pulling hundreds of millions. You've been reading 'voices' and KoS presumably? If this is a bad year... Oh I think the botnets are doing fine, thank you. They’re still pulling hundreds of millions. You’ve been reading ‘voices’ and KoS presumably? If this is a bad year…

Like or Dislike: Thumb up 0 Thumb down 0
]]>