About Me

Dirk Kollberg

Dirk Kollberg

Read More

Feeds & Podcasts

Blogs

Meet the Bloggers

Archive

Tags

#SecChat $1 million guarantee 12 Scams of Christmas access to live fraud resolution agents Acquisition Alex Thurber Android antivirus Apple botnet Channel Partners cloud security Compliance Consumer counter identity theft credit card fraud and protection credit fraud alerts credit monitoring credit monitoring and resolution critical infrastructure Cyber Security Mom cyberbullying Cybercrime cybermom data breach data center data center security Data Protection Dave DeWalt DLP Email & Web Security embedded encryption Endpoint Protection enterprise facebook fake anti-virus software Family Safety Friday Security Highlights global threat intelligence google government Hacktivism how to talk to kids how to talk to teens identity fraud identity fraud scams identity protection identity protection $1 million guarantee identity protection fraud identity protection surveillance identity surveillance identity theft identity theft expert identity theft fraud identity theft protection identity theft protection product Identity thieves and cybercriminals intel iphone kids online behavior lost wallet protection malware McAfee McAfee Channel McAfee Family Protection McAfee Identity Protection McAfee Initiative to Fight Cybercrime McAfee Labs McAfee security products Mid-Market Mobile mobile malware mobile security monitor credit and personal information Network Security online personal data protection online safety Operation Aurora PCI personal identity theft fraud personal information loss personal information protection phishing privacy proactive identity protection proactive identity surveillance Public Sector restore credit and personal identity Risk and Compliance scam scams scareware security smartphones social media social networking social networks spam Stuxnet twitter vulnerability Web 2.0 work with victim restore identity

Nuwar/Zhelatin/Storm took a nap

Friday, August 31, 2007 at 7:16am by Dirk Kollberg
Dirk Kollberg

While monitoring the Nuwar/Zhelatin/Storm network, I noticed the bot stoped sending out emails on Thursday at 9.45pm UTC.

No more postcards? No more Pump&Dump spam? Or just a bug in my setup?

This morning at 7.00am UTC, still not a single mail. But I saw the bot connecting to the Peer-to-Peer network and transfering data – the same way it used to do the last several days.

I gave MessageLabs a call and they confirmed that the number of intercepted emails containing Nuwar related links had diminished considerably in the past few hours.

So it’s not my goat setup behaving different as expected.

Time to party? Unfortunately not – at 10.45am UTC, my system sent me an alert. New mails got captured. Well, at least it took a nap for 13 hours.

Watch out for mails offering videos from either:

Snoop Dog, Beyonce, Hurricane Chris, Emenem, Lil Mama, Heuy, Chris Brown, Eagles, T-Pain, Fergie, R. Kelly, Sean Kingston, Kelly Clarkson, Velvet Revolver, Fat Boy, Akon, Rihanna, Foo Fighters.

For example:

Zhelatin example

Š

Bookmark and Share

Submit your own comments / message for this post

Your email is never published nor shared. Required fields are marked *

 

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

Comments (0)