Researchers Take Down Koobface Servers

splitenz notes the first actions in the war against the Koobface botnet, taken on the heels of a comprehensive report (PDF) on the operations of the botnet and the criminal gang behind it. The researchers who analyzed Koobface are the same ones who brought Ghostnet to light. "Security researchers, working with law enforcement and Internet service providers, have disrupted the brains of the Koobface botnet.The computer identified as the command-and-control server used to send instructions to infected Koobface machines was offline late Friday (US Pacific time). Criminals behind the botnet made more than $US2 million in one year. Facebook accounts are used to lure victims to Google Blogspot pages, which in turn redirect them to Web servers that contain the malicious Koobface code. This action is only a stage in the war against Koobface."

Comments

Re:Fight Fire With Fire.

[pgmrdlm]

If you receive a notice of high bandwidth usage after a pattern of never going over a specific amount in a month. Whats your problem?

Profiling of bandwidth use would be a very good tool. And I feel completely legitimate. Your a 68 year old parent who is using 40 gig a month of bandwidth. This is after a pattern over several years of only 1 gig a month. You think that shouldn't be questioned???

And based on your snotty response to the previous person. Yes, I expect you to flame me. Go for it, I'm waiting with a reply already typed.