Forest Global Training Partners

Cyber Risks · Krebs on Security

U.S. Government Takes Down Coreflood Botnet

Summary: The U.S. Justice Department and FBI won court authority to seize control of the Coreflood botnet, which had infected some 378,000 PCs by 2008 and was used to steal banking credentials and drain accounts. On April 11, 2011, the U.S. Attorney's Office for the District of Connecticut filed a civil complaint against 13 unknown defendants and was granted control of 29 domain names, with Coreflood control servers redirected to the Internet Systems Consortium so infected machines would receive a command telling the bot software to quit.

What's compelling: Coreflood's operators stole more than 500 gigabytes of banking credentials and other sensitive data, and the takedown included thefts of $241,866 from a Tennessee defense contractor, $115,771 from a Michigan real estate company, and $151,201 from a North Carolina investment firm - losses that accumulated while the botnet ran for nearly a decade.

Read the original at Krebs on Security ↗

Topics
Malware
Related