Free Newsletters
Technology & Business Daily

InfoWorld
Log-in | Register

Botnet management app exposed

Sophisticated Zunker app has been used to control and monitor tens of thousands of botnet PCs


A new and unusually sophisticated application for controlling and monitoring botnet PCs has been discovered by security company Panda Software.

Called Zunker, it turns out to be a PC management application like no other. The company reports that the program is capable of giving botnet criminals user-friendly graphs of individual botnet performance, including the number of available compromised "zombies" on each at any one time, and their levels of activity on a daily or monthly basis.

To all intents and purposes, Zunker operates as would any other PC management system except that the intent of the application is criminal.

According to Panda Software, Zunker has been used to control and monitor tens of thousands of PCs across up to 54 countries, which would put it in control of a fairly standard botnet. Fifty-four percent of the PCs infected remained under its control at the time of its discovery.

"The program has been carefully designed and is easy to use. Zunker organizes the bots by country, and shows how many bots there are along with reports from each one, how much spam has been sent and what software has been used by the bots to send the spam (Gmail, IM, forums, etc)," said Panda Software's Luis Corrons.

Zunker could give botnetters statistics on the lifespan of particular botnets -- how many infected PCs were still in operation -- and allow files to be downloaded to infected PCs to perform activities beyond basic spam relaying, such as information theft.

According to Corrons, the innovation of Zunker was that it offered both control and monitoring in one interface, something that has not been seen before to this degree. The Zunker botnet was recently responsible for a sizable volume of spam designed to spread the Alanchum.VL Trojan.

"This is a lucrative crime. The bot-herder can rent out the network to the highest bidder. Cybercrooks use them for a wide range of criminal activities including downloading malware onto infected computers, distributing spam or phishing messages or causing denial of services. The bot-herder can also use the botnet for their own activities, although this is less common," said Corrons.


Talkback:

commentPost a Comment

 

MOST COMMENTS

 
 





Virtualization: A Step by Step Approach to Success
Your virtual machines can be up and running in a matter of minutes. HP and Citrix have integrated XenServer with HP ProLiant servers and management tools, powered by hardware-assisted Intel Virtualization Technology to enable high- performance, cost-savings solutions for server consolidation and disaster recovery. Sponsor: HP

»  Click here to view this Webcast
  Storage is big, and getting bigger
The only certainty is that your requirement for storage will never be satisfied. While you clean out space and authorize POs, you might consider another alternative: outsourcing. The best way to deal with storage might be to let someone else deal with it. Sponsored by SGI

»  Click here to download now

- Special Advertising Partners -
WHITE PAPERS
 
  • Need simple, low cost server virtualization? - Do more with less. Support fewer servers. Simplify disaster recovery. Implement proven, easy-to-use server virtualization...
  • Virtually Limitless Virtual Storage - Do you need virtualization space savings of 50% or more with virtually no performance impact? You might be able to get storage...
  • Invisible IT? - The goal of IT is to become an invisible entity within a larger organization. Eliminating visibility and road blocks IT ...
  • It Really Is Easy to be Green - "Green IT" is a popular concept. And IT organizations are learning the influence that IT purchase decisions have on data...
  • Key Strategies For SOA Testing - SOA requires a unique approach to testing. Unless you're willing to reorient your testing procedures and technology now,...
  • Eliminate Botnet Security Risks - Botnets are widely regarded as the top threat to network security. This Whitepaper explains how botnets have traditionally...

» Technology White Papers Library

Technology White Papers by Topic

Technology White Papers E-mail Alert

Find out when the latest white paper is available:
 
 
INFOWORLD MARKETPLACE
 
» BUY A LINK NOW
 
 

Video

 
 
 

Podcasts

 
 
 

 

Columnists

 
 
 

Resource Center


Ads by techwords beta  [See your link here]
 




Sponsored Technology Links

 
 
 HOME  NEWS  BLOGS  PODCASTS  VIDEOS  TECHNOLOGIES  TEST CENTER  EVENTS  CAREERS  IT EXEC-CONNECT   About | Advertise | Awards | RSS | Contact Us 

Copyright © 2008, Reprints, Permissions, Licensing, IDG Network, Privacy Policy, Terms of Service.
All Rights reserved. InfoWorld is a leading publisher of technology information and product reviews on topics including viruses,
phishing, worms, firewalls, security, servers, storage, networking, wireless, databases, and web services.

CIO :: ComputerWorld :: CSO :: Demo :: GamePro :: Games.net :: IDG Connect :: IDG World Expo
Industry Standard :: IT World :: JavaWorld :: LinuxWorld :: MacUser :: Macworld :: Network World :: PC World :: Playlist