Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le avril 10, 2012, 18:20:58

Titre: [SecListe]Botnet Shutdown Success Story - again: Disabling the new Hlux/Kelihos Botnet
Posté par: igor51 le avril 10, 2012, 18:20:58
Botnet Shutdown Success Story - again: Disabling the new Hlux/Kelihos Botnet

<p><a href="http://www.securelist.com/en/en/blog/208193137/Botnet_Shutdown_Success_Story_How_Kaspersky_Lab_Disabled_the_Hlux_Kelihos_Botnet" >Last September</a>, in partnership with Microsoft’s Digital Crimes Unit (DCU), SurfNET and Kyrus Tech, Inc., Kaspersky Lab successfully disabled the dangerous Hlux/Kelihos botnet by sinkholing the infected machines to a host under our control.</p> <p>A few months later, our researchers stumbled upon a new version of the malware with significant changes in the communication protocol and new “features” like flash-drive infection, bitcoin-mining wallet theft.</p> <p>Now, we are pleased to announce that we have partnered with the CrowdStrike Intelligence Team, the Honeynet Project and Dell SecureWorks to disable this new botnet.</p>
Source: Botnet Shutdown Success Story - again: Disabling the new Hlux/Kelihos Botnet (http://www.securelist.com/en/blog/208193431/Botnet_Shutdown_Success_Story_again_Disabling_the_new_Hlux_Kelihos_Botnet)