Newsletters
News & Information for Technology Purchasers NewsFactor Sites:       NewsFactor.com     Enterprise Security Today     CRM Daily     Business Report     Sci-Tech Today  
   
This ad will display for the next 20 seconds. Click for more information, or
Home Enterprise I.T. Cloud Computing Applications Hardware More Topics...
Network Security
DDoS Protection Powered By Verisign
Average Rating:
Rate this article:  
Microsoft Leads Strike Against Massive ZeroAccess Botnet

Microsoft Leads Strike Against Massive ZeroAccess Botnet
By Jennifer LeClaire

Share
Share on Facebook Share on Twitter Share on Linkedin Share on Google Plus

Regarding Microsoft's strike at the ZeroAccess botnet, says security engineer Ken Pickering, “I believe the goal for Microsoft is to raise the daily expenses for the botnet owner [like ZeroAccess'] to the point where the risk and cost can no longer be sustained. Taking key IP addresses away from the bad guys will force them to exert much more effort in order to maintain their precious botnet.”
 


Microsoft is once again flexing its cybercrime-fighting muscles. For the third time this year, Redmond’s Digital Crimes Unit has disrupted a dangerous botnet that has impacted millions of consumers.

Microsoft worked with Europol’s European Cybercrime Centre (EC3), the Federal Bureau of Investigation and technology industry leaders like A10 Networks, to take down the rampant Sirefef botnet. Also known as ZeroAccess, the botnet has infected nearly 2 million computers all over the world and cost online advertisers upwards of $2.7 million each month.

According to Microsoft, ZeroAccess targets all major search engines and browsers, including Google, Bing and Yahoo. Most of the infected machines are in the U.S. and Western Europe. Microsoft is comparing ZeroAccess to the Bamital botnet, which the company and its partners took down in February, in that it is responsible for hijacking search results and directing people to potentially dangerous Web sites that could install malware onto their computer, steal their personal information or fraudulently charge businesses for online advertisement clicks. ZeroAccess also commits click fraud.

Not Completely Dead

“Due to its botnet architecture, ZeroAccess is one of the most robust and durable botnets in operation today, and was built to be resilient to disruption efforts, relying on a peer-to-peer infrastructure that allows cybercriminals to remotely control the botnet from tens of thousands of different computers,” Microsoft wrote in a blog post.

Most often, the company said, computers become infected with ZeroAccess as a result of what are known as drive-by-downloads -- cybercriminals create a Web site that downloads malware onto any unprotected computer that happens to visit that site. Microsoft said computers can also become infected through counterfeit and unlicensed software, where criminals disguise ZeroAccess as legitimate software, tricking a person into downloading the ZeroAccess malware onto their computer.

“Because of the sophistication of the threat, Microsoft and its partners do not expect to fully eliminate the ZeroAccess botnet,” the company said. “However, we do expect this legal and technical action will significantly disrupt the botnet’s operation by disrupting the cybercriminals’ business model and forcing them to rebuild their criminal infrastructure, as well as preventing victims’ computers from committing the fraudulent schemes.”

Cleaning Up Messes

We caught up with Tommy Chin, a technical support engineer at CORE Security, to get his feedback on the operation. He told us Microsoft deserves an A for effort.

“It is not a simple task to take down a decentralized botnet. However, Microsoft's DCU seems to be motivated and their drive to team up with the right law enforcement agencies sounds really promising,” Chin said. (continued...)

1  |  2  |  Next Page >

 

Tell Us What You Think
Comment:

Name:

Dawesi:

Posted: 2013-12-16 @ 4:28pm PT
"but we’d also be better off writing less exploitable operating systems and educating users to avoid building these networks"

Good to see quotes from people who understand security. If you can write it, you can hack it. Period. If it's written, people will find a hole, people are paid to do this everyday (good people that is), then the bad people exploit the known holes.



Salesforce.com is the market and technology leader in Software-as-a-Service. Its award-winning CRM solution helps 82,400 customers worldwide manage and share business information over the Internet. Experience CRM success. Click here for a FREE 30-day trial.


 Network Security
1.   UPS Stores Hit by Data Breach
2.   Target Data Breach Cost: $148 Million
3.   Aruba Handles Black Hat with Aplomb
4.   Chinese Hackers Steal Patient Data
5.   FBI Cybersquad To Add Agents


advertisement
UPS Stores Hit by Data Breach
Biz must adopt better security measures.
Average Rating:
Target Data Breach Cost: $148 Million
Better customer data protection needed.
Average Rating:
FBI Cybersquad To Add Agents
Rewarded for recent security successes.
Average Rating:
Product Information and Resources for Technology You Can Use To Boost Your Business

Network Security Spotlight
UPS Stores in 24 States Hit by Data Breach
Big Brown has been breached. UPS said that about 105,000 customer transactions at 51 of its UPS Store locations in 24 states could have been compromised between January and August.
 
Cost of Target Data Breach: $148 Million Plus Loss of Trust
The now infamous Target data breach is still costing the company -- and its shareholders -- plenty. In fact, the retailing giant forecast the December 2013 incident cost shareholders $148 million.
 
Aruba Networks Handles Black Hat with Aplomb
It's not an easy job. Aruba Networks' task throughout the Black Hat USA conference in Las Vegas this month was to ensure thousands of attendees could connect without malicious attacks.
 

Enterprise Hardware Spotlight
Acer's New Desktop Box Rides the Chrome OS Wave
Filling out its Chrome OS line, Acer is following the introduction of a larger Chromebook line earlier this month with a new tiny $180 desktop Chromebox and also a smaller Chromebook.
 
Three New Lenovo PCs Aimed at Business Users
Businesses everywhere want computing solutions that do more for less money, and Lenovo has unveiled three new desktop PCs that offer solid computing at a budget-minded price.
 
Aruba Networks Handles Black Hat with Aplomb
It's not an easy job. Aruba Networks' task throughout the Black Hat USA conference in Las Vegas this month was to ensure thousands of attendees could connect without malicious attacks.
 

Mobile Technology Spotlight
Google Glass Adds Voice Access to Phone Contacts
The latest update to Google Glass will let users access their top 20 phone contacts with voice commands alone. A user can then choose a phone call, Google hangouts, e-mail or text messaging.
 
Samsung, B&N Target Amazon with Nook Tablet
They've seen the enemy and it is Amazon. So Samsung and Barnes & Noble are teaming up to combat their common foe with a 7-inch tablet that blends Samsung’s tech, Nook’s content and e-reader platform.
 
Acer's New Desktop Box Rides the Chrome OS Wave
Filling out its Chrome OS line, Acer is following the introduction of a larger Chromebook line earlier this month with a new tiny $180 desktop Chromebox and also a smaller Chromebook.
 

Navigation
NewsFactor Network
Home/Top News | Enterprise I.T. | Cloud Computing | Applications | Hardware | Mobile Tech | Big Data | Communications
World Wide Web | Network Security | Data Storage | CRM Systems | Microsoft/Windows | Apple/Mac | Linux/Open Source | Personal Tech
Press Releases
NewsFactor Network Enterprise I.T. Sites
NewsFactor Technology News | Enterprise Security Today | CRM Daily

NewsFactor Business and Innovation Sites
Sci-Tech Today | NewsFactor Business Report

NewsFactor Services
FreeNewsFeed | Free Newsletters

About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2014 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo. Member of Accuserve Ad Network.