Forest Global Training Partners

Cyber Risks · Krebs on Security

Microsoft to Botmasters: Abandon Your Inboxes

Summary: Microsoft's civil lawsuit against the ZeuS botnet operators led it to subpoena Google for the account records of 39 "John Does," and Google notified those account holders they had until 5pm Pacific on May 22, 2012 to file a formal objection. Critics said Microsoft published data cut-and-pasted from a secret ZeuS Working Group, named suspects already imprisoned - including Yevhen Kulibaba and Yuriy Konovalenko, each serving four years - and listed sinkhole addresses used by security researchers.

Why it matters: Microsoft's own complaint named at least 15 accounts at its Hotmail and MSN services, and it is unclear whether those users were told of the subpoenas, while Google was the only provider on the EFF's list recognized for reliably alerting users. Researchers who shared ZeuS data in confidence now say trust groups may disband, and the seized botnet servers were reportedly back up within 24 hours.

Read the original at Krebs on Security ↗

Topics
Malware
Related