Forest Global Training Partners

Cyber Risks · Krebs on Security

Crooks Seek Revival of ‘Gameover Zeus’ Botnet

Summary: Researchers at Malcovery detected spam campaigns carrying zip-file malware that shares roughly 90 percent of its code base with Gameover ZeuS, about five weeks after an international takedown of the original botnet. The new variant drops the original's peer-to-peer control mechanism in favor of fast-flux hosting, but retains a domain generation algorithm that produces a weekly list of gibberish domains the malware can fall back to if its normal communications fail.

What's compelling: The Justice Department has tied Gameover ZeuS to more than $100 million in account takeovers, and the criminals behind its distribution, described as a core group of hackers from Russia and Ukraine, are rebuilding from scratch rather than walking away after one of the largest botnet takedowns in history.

Read the original at Krebs on Security ↗

Topics
Malware
Related