Attackers use all kinds of attack vectors to steal sensitive information from their targets. Their efforts are not limited to only zero-day vulnerabilities. Malware authors often exploit old vulnerabilities because a large number of organizations still use old vulnerable software. The Trojan Travnet, which steals information, is a classic example of malware that takes advantage Read more…
Tags: APT, bots, CVE-2010-3333, data theft, malware, nettraveler, Travnet, trojan
While working on the release of the latest version of the McAfee Network Security Platform, which offers advanced malware and botnet protection, we tested a sample of the malware Red October. With the help of our in-house advanced botnet analysis framework, we analyzed the network traffic generated by this sample and tracked its communications with the Read more…
Tags: botnet, bots, C&C communication, NSP 7.5, Red October
In September we added 1.6 million malware to our database. With these new entries, our malware collection surpassed 70 million samples. The five million new samples in the third quarter represent approximately 55,000 samples per day, 2,300 per hour, or 38 per minute. To get a sense of these threats, I examined one day at Read more…
On July 1 we released the results of our S.P.A.M (Spammed Persistently All Month) Experiment, in which 50 people from around the world surfed the Web unprotected for 30 days. By taking part in the experiment, participants were given permission to go where most Internet users would not dare, in order to discover how much Read more…
As I was recently asked about botnet figures, I revisited our collections to establish some trends in this area. In 2004 and 2005, bots were placed in a separate group of their own, separate from viruses and Trojans. Their names often ended with « bot » (W32/Sdbot, W32/Spybot, W32/Gaobot”¦). Based on the number of separate Read more…
Posts tagged under bots