Microsoft, Law Enforcement Disrupt Dorkbot Botnet (technet.com)

An anonymous reader writes: Microsoft said in a blog post Thursday that it aided law enforcement agencies in several regions to disrupt a 4-year-old botnet called Dorkbot. The botnet aims to steal login credentials from services such as Gmail, Facebook, PayPal, Steam, eBay, Twitter and Netflix and has infected one million computers worldwide. The company didn't provide details on how Dorkbot's infrastructure was disrupted.

Comments

Plenty Of Detail

[Anonymous Coward]

The company didn't provide details on how Dorkbot's infrastructure was disrupted.

WTF, they "activated a Coordinated Malware Eradication (CME) campaign, performed deep research, and provided telemetry to partners and law enforcement". There's enough meaningless jargon in there to satisfy even the most buzzword calloused manager.

Re:Plenty Of Detail

[TWX]

I doubt it. The fact that Microsoft OSes get so infected as they do makes me think they simply broke something like the DNS process that the botnet is dependent on. For all we know, they haven't actually disabled the botnet, just taken control over it.

The opportunity presented itself...

[Drewdad]

...while Dorkbot's operator was trying to decipher Microsoft's new core-based licensing structure.

Re:The opportunity presented itself...

[zlives]

more likely windows 10 telemetry helped in locating, dissecting and disinfecting the botnet without compromising privacy in any way.

Re:Netflix

[Sowelu]

Realistically though--they can steal some personal information, like name and probably your billing addresses, and they possess a username that is likely to be in use somewhere else. With a username, real names and a billing address, you have enough information to start socially engineering your way into other things.

Re:Netflix

[TheGrimmReaper]

Many people re-use the same password so in theory, getting someone's netflix password could get you into other sites.

Microsoft shutsdown Microsoft botnet ..

[nickweller]

What Desktop operating System did this Dorkbot botnet run on?

Re:Netflix

[ShaunC]

Can someone explain it to me how it hurts the Netflix user's account when it's stolen?

Depends on your definition of "hurt." By my own definition, it would "hurt" me if Netflix saw my account logging in from some other country and shut it down. Now I have to contact Netflix and see why my account isn't working, maybe spend awhile on the phone swearing up and down that I haven't given my password to some guy in Russia and I promise I'll make a 45-character passphrase. All of this takes time and effort. It's not nearly as severe as having credentials to a bank account stolen, but it's still "harm" as far as I'm concerned.