New Survey Lists Top Eleven Botnets

Joe Stewart, director of malware research at SecureWorks Inc., presented a survey ranking the top 11botnets that send an estimated 100 billion spam messages a day from over a million hacked systems.

	Botnet	# of bots	Spam capability
1	Srizbi	315,000	60Billion/day
2	Bobax	185,000	9Billion/day
3	Rustock	150,000	30Billion/day
4	Cutwail	125,000	16Billion/day
5	Storm	85,000	3Billion/day
6	Grum	50,000	2Billion/day
7	Onewordsub	40,000	Unknown
8	Ozdok	35,000	10Billion/day
9	Nucrypt	20,000	5Billion/day
10	Wopla	20,000	600Million/day
11	Spamthru	12,000	350Million/day

Stewart’s research also helps categorize bots and reduce confusion regarding different botnets under the same name, proving through SMTP ‘fingerprints’ that certain previously discovered bots like “Kracken” are
really just variations of existing bots, in the case of Kracken, Bobax.

Tags: botnet, Malware

Author: Christopher

Throughout November we compiled data for the source of Zombie IPs and their geographic locations.

• 14% U.S.
• 6% Russia
• 6% Brazil
• 5% Italy
• 5% Poland
• 5% Mexico
• 5% Turkey
• 4% Spain
• 4% Germany
• 4% China
• 3% U.K.
• 3% Korea
• 3% France
• 31% Other

Zombie IPs frequently change to conceal their identity, and they may even force an IP change on their infected host.

Tags: Zombie Networks

Author: Christopher