2nd update for Friday, March, 12, 2010 – Troyak-AS is down again – “This AS is not currently used to announce prefixes in the global routing table, nor is it used as a visible transit AS.”

UPDATED: Friday, March, 12, 2010 – Troyak-AS peering courtesy of AS25189 – NLINE-AS JSC Nline. Since the entire Troyak-as takedown campaign is turning into an infinite loop, it’s time for a “terminating

View full post on Dancho Danchev’s Blog – Mind Streams of Information Security Knowledge

• Well known ZeuS hosting ISP “Group Vertical” offline
  A week ago I wrote a post about the well known rogue ISP Group Vertical (see “Source of badness: Group Vertical Ltd (AS49365)”) which was top ZeuS hosting ISP over several month. Today I ...
• Massive Drop in Number of Active Zeus C&C Servers
  I always check the ZeuS Tracker statistics to get some information about the trend of the active ZeuS Command&Control servers. This morning I was really surprised what I saw on the ZeuS Tracker s...
• Trend Micro Sinkholes and Eliminates a ZeuS Botnet C&C
  In February 2011, we successfully collaborated with CDMON, a registrar, to gain control of a ZeuS botnet command-and-control (C&C) server, thereby rendering it ineffective. Our success gave us the...
• ZeuS Source Code Already in the Wild
  For about two weeks now, the ZeuS source code has been making its way around to different people. Many people have been offering it up for sale on multiple forums, but lots of times it is only pieces ...
• ZeuS 2.0.8.9 and the Ghost Panel
  Before ZeuS author Monstr/Slavik handed over his source code to SpyEye author Harderman/Gribodemon, the last known ZeuS version was 2.0.8.9. The ZeuS crimeware, which exponentially grew in popularity ...
• Carberp hits ZeuS and AV software
  We have talked in the last blog post about how SpyEye trojan evolved during the time, illustrating some of its technical features and the encryption algorithm used by the trojan to decrypt the config...
• ZeuS Targets Mobile Users
  As early as 2006, Trend Micro already recognized the fact that the BlackBerry technology could be exploited by cybercriminals. The smartphone may have remained spared from malware attacks over the yea...
• “ACH Transaction Rejected” payments lead to Zeus
  On February 23rd, our friends at Trend Micro reported that ACH Leads to Fake Java Update. Looking into this campaign in the UAB Spam Data Mine we found some interesting characteristics about the spam...
• ZeuS Mitmo Strikes Again: Polish ING Bank
  Breaking news from Poland today: A variant of the ZeuS trojan is targeting the mobile phone based, two-factor authentication used by ING Bank Slaski (Polish ING Bank).Security consultant and b...
• Zeus and SpyEye: Old Dogs Repeat Old Tricks
  There is a lot of buzz in the security community lately about the merger of two widespread password-stealing malware families, Zbot (maker of Zeus) and SpyEye. Some reports says that the Zbot source ...