Access your Pro+ Content below.
ISP shutdown slows Zeus botnet
This article is part of the April 2010 issue of Information Security magazine
Many experts in the security industry are speculating why Kazakhstan-based Troyak.org, the ISP serving a large chunk of the Zeus botnet, suddenly went dark March 9, severing the ties between thousands of zombie machines and the command-and-control servers they use to receive their marching orders. Whether the shutdown is a mixture of efforts by law enforcement and anonymous security researchers or the action of the ISPs that service Troyak is anyone's guess. But experts says the activity appears to be throwing a wrench in spam and phishing campaigns and slowing the spread of different malware variants of the nasty Zeus crimeware toolkit, which has been a serious problem for the banking industry. "There appears to be an ongoing effort to keep Troyak shut down, which is encouraging and definitely the right approach," says Sean Brady, a global expert on issues and mitigation strategies related to online fraud at RSA, the security division of EMC.. "Right now the fraudsters are spending time, money and resources to get online and ...
Features in this issue
Security experts say the Zeus botnet was slowed with the shutdown of Troyak, an ISP serving a large chunk of the Zeus botnet
Security teams will continue to focus on efficiency and alignment with business as the economy recovers
Endpoint security and control for devices like thumb drives, SIM cards and mobile devices can no longer be ignored.
Today's anti-fraud technologies create gated communities for online banking.
Columns in this issue
The information security profession took two steps backwards with the firing of Pennsylvannia's CISO because of his comments on a conference panel, which illustrates the continuing disconnect between management and information security.
Is outsourcing code development a threat to national security? Marcus Ranum and Bruce Schneier go head-to-head on this topic.
Lawyers have a lot of concerns about cloud computing services. Learn about cloud computing legal issues