Slashdot Mirror


Estonian ISP Shuts Srizbi Back Down, For Now

wiedzmin writes "In response to the recent resurrection of the Srizbi botnet, an Estonian ISP has shut down the hosting company that was housing its new control servers. Starline Web Services, based in Estonia's capital Tallinn, had become the new home for the Srizbi botnet control center after the McColo hosting company (which was taken down earlier this month) has briefly come back to life last week, allowing the botnet to hand-off control to the Estonian network. After Estonia's biggest ISP Linxtelecom demanded that Starline Web Service be taken offline, the newly acquired Srizbi control servers went down with it. However, as the rootkit is armed with an algorithm that periodically generates new domain names where the malware then looks for new instructions, it is only a matter of time before a new set of control servers is created and used to manipulate one of the biggest spam botnets in the world."

1 of 237 comments (clear)

  1. Re:Think by Malc · · Score: 0, Offtopic

    along with an OS that allows that sort of compromise to be so easy

    Well that's almost any OS out there. I've never had a Windows system compromised, but I have lost a Linux box. Anything connected to the internet has to be fully patched (good passwords, minimum services, etc, etc), and preferably behind a NAT box if it's a home-computer