Huge 'botnet' amputated, but criminals reconnect

The sudden takedown of an Internet provider thought to be helping spread one of the most promiscuous pieces of malicious software out there appears to have cut off criminals from potentially millions of personal computers under their control.

But the victory was short-lived. Less than a day after a service known as "AS Troyak" was unplugged from the Internet, security researchers said Wednesday it apparently had found a way to get back online, and criminals were reconnecting with their unmoored machines.



The drama initially raised hopes of a sharp drop-off in fraud, because criminals could no longer communicate with many computers infected with a type of malware known as "ZeuS," which is mostly used to steal online banking usernames and passwords. Hundreds of criminal operations around the world use the malware.



It's unknown how many computers are infected with ZeuS, but it's estimated to be in the millions. Cisco said as many as 25 per cent of the world's ZeuS-infected machines were unplugged from the massive "botnet" overnight with the takedown of AS Troyak.



Botnets are networks of infected PCs that behave like criminals' remote-control robots. They steal identities en masse and are used to attack Web sites.



But instead of a slam-dunk victory, the incident wound up highlighting the whiplash pace at which criminals can resurrect their illicit businesses after what should have been a devastating setback.



RSA, the security division of EMC Corp., said dozens of malicious servers that criminals used to spread ZeuS were connected to the Internet by AS Troyak. The service inexplicably went dark Tuesday, severing the ties between criminals and ZeuS-infected machines under their control.



It's not publicly known who pulled the plug. It could have been law enforcement, security researchers, or even the criminals themselves if they decided to move their operations to other servers.



Shutting down malware operations is a constant cat-and-mouse game.



Some services exist solely to host malicious content, and when their connections to the Internet are severed, it's often relatively easy to find another provider willing to sell them a new connection.



RSA researchers wrote in a note to clients that their experience shows that "these kinds of drastic changes are usually short-lived, as in the long run, criminals tend to restructure their criminal activity and relaunch their online attacks."



That apparently happened - and quickly. By Wednesday, researchers said the servers appeared to be back online, through a new Internet provider.



Cisco researchers said a total of 68 command-and-control servers were brought down, but that it's unknown how many infected computers were connected to each of those.



But they added that the criminals may have known the servers were going to be brought down, because traffic to those servers spiked over the weekend, suggesting they were directing infected computers to point to new servers.



One of the most high-profile takedowns of a malicious Web site hosting service involved a company called McColo Corp. whose Internet service was severed in the winter of 2008 after researchers amassed evidence of the company's wrongdoing.



Worldwide spam volumes almost instantly dropped by half, but within days started climbing again.

PROMOTED VIDEO
Life and Style
ebookA wonderful selection of salads, starters and mains featuring venison, grouse and other game
News
people
Life and Style
Upright, everything’s all right (to a point): remaining on one’s feet has its health benefits – though in moderation
HealthIf sitting is bad for your health, what happens when you stay on your feet for a whole month?
News
Kristen Stewart and Rupert Sanders were pictured embracing in 2012
people
News
President Obama, one of the more enthusiastic users of the fist bump
scienceBumping fists rather than shaking hands could reduce the spread of infectious diseases, it is claimed
Sport
Mario Balotelli posed for this selfie during AC Milan's 5-1 defeat to Manchester City
sport
Sport
Laura Trott with her gold
Commonwealth Games
Arts and Entertainment
Gal Gadot as Wonder Woman
arts + ents
News
Bryan had a bracelet given to him by his late father stolen during the raid
people
Sport
France striker Loic Remy
sportThe QPR striker flew to Boston earlier in the week to complete deal
Extras
indybestSpice up your knife with our selection of delicious toppings
Sport
sport
News
Orville and Keith Harris. He covered up his condition by getting people to read out scripts to him
People
Independent
Travel Shop
the manor
Up to 70% off luxury travel
on city breaks Find out more
santorini
Up to 70% off luxury travel
on chic beach resorts Find out more
sardina foodie
Up to 70% off luxury travel
on country retreats Find out more
Latest stories from i100
Have you tried new the Independent Digital Edition apps?
Independent Dating
and  

By clicking 'Search' you
are agreeing to our
Terms of Use.

ES Rentals

    iJobs Job Widget
    iJobs Gadgets & Tech

    Senior Java Developer

    £45000 - £60000 per annum + competitive: Progressive Recruitment: Leading Sof...

    SAP Finance Systems Analyst

    competitive: Progressive Recruitment: This is an exciting opportunity for a PE...

    JavaScript Developer (Angular, AJAX, TDD, HTML5, ExtJS) London

    £45000 - £70000 per annum + Benefits + Bonus: Harrington Starr: JavaScript Dev...

    C# Graduate Developer (SQL Server, ASP.Net, .Net)

    £30000 - £40000 per annum + Benefits + Bonus: Harrington Starr: C# Graduate De...

    Day In a Page

    A new Russian revolution: Cracks start to appear in Putin’s Kremlin power bloc

    A new Russian revolution

    Cracks start to appear in Putin’s Kremlin power bloc
    Eugene de Kock: Apartheid’s sadistic killer that his country cannot forgive

    Apartheid’s sadistic killer that his country cannot forgive

    The debate rages in South Africa over whether Eugene de Kock should ever be released from jail
    Standing my ground: If sitting is bad for your health, what happens when you stay on your feet for a whole month?

    Standing my ground

    If sitting is bad for your health, what happens when you stay on your feet for a whole month?
    Commonwealth Games 2014: Dai Greene prays for chance to rebuild after injury agony

    Greene prays for chance to rebuild after injury agony

    Welsh hurdler was World, European and Commonwealth champion, but then the injuries crept in
    Israel-Gaza conflict: Secret report helps Israelis to hide facts

    Patrick Cockburn: Secret report helps Israel to hide facts

    The slickness of Israel's spokesmen is rooted in directions set down by pollster Frank Luntz
    The man who dared to go on holiday

    The man who dared to go on holiday

    New York's mayor has taken a vacation - in a nation that has still to enforce paid leave, it caused quite a stir, reports Rupert Cornwell
    Best comedians: How the professionals go about their funny business, from Sarah Millican to Marcus Brigstocke

    Best comedians: How the professionals go about their funny business

    For all those wanting to know how stand-ups keep standing, here are some of the best moments
    The Guest List 2014: Forget the Man Booker longlist, Literary Editor Katy Guest offers her alternative picks

    The Guest List 2014

    Forget the Man Booker longlist, Literary Editor Katy Guest offers her alternative picks
    Jokes on Hollywood: 'With comedy film audiences shrinking, it’s time to move on'

    Jokes on Hollywood

    With comedy film audiences shrinking, it’s time to move on
    It's the best of British art... but not all is on display

    It's the best of British art... but not all is on display

    Voted for by the British public, the artworks on Art Everywhere posters may be the only place where they can be seen
    Critic claims 'I was the inspiration for Blanche DuBois'

    Critic claims 'I was the inspiration for Blanche DuBois'

    Blanche Marvin reveals how Tennessee Williams used her name and an off-the-cuff remark to create an iconic character
    Sometimes it's hard to be a literary novelist

    Sometimes it's hard to be a literary novelist

    Websites offering your ebooks for nothing is only the latest disrespect the modern writer is subjected to, says DJ Taylor
    Edinburgh Fringe 2014: The comedy highlights, from Bridget Christie to Jack Dee

    Edinburgh Fringe 2014

    The comedy highlights, from Bridget Christie to Jack Dee
    Dame Jenny Abramsky: 'We have to rethink. If not, museums and parks will close'

    Dame Jenny Abramsky: 'We have to rethink. If not, museums and parks will close'

    The woman stepping down as chair of the Heritage Lottery Fund is worried