Lavasoft Security Bulletin - September 2014: Bot Review
Bot Review
Table: Bots under analysis (September 2014, Lavasoft MAS).
| Bot Family | August 2014 | September 2014 | Changes |
| Zbot | 74 | 26 | -57.8% |
| Cycbot | 3 | 31 | 33.7% |
| Kelihos | 20 | 12 | -9.6% |
| NrgBot/Dorkbot | 30 | 13 | -20.5% |
| Blazebot/Rbot | 2 | 0 | -2.4% |
| Shiz | 1 | 1 | -0.0% |
| Total | 130 | 83 |
Bot distribution in September:
Kelihos. You can find the latest description of Kelihos here.
Cycbot. You can find the latest description of Cycbot here.
Shiz. The latest example is here.
Zbot. See the report in Malware Encyclopedia. 23% of alive Zeus backdoors use Tor network to connect C&C.
NrgBot/Dorkbot. The backdoor showed mailing activity this month. You can find the latest description here.
Blazebot/Rbot. No samples were discovered.
Read also:
Lavasoft Security Bulletin - September 2014: Top Threats.
PUPs with Rootkit.
Share this post:
Twitter
Facebook