Huge 'botnet' amputated, but criminals reconnect

The sudden takedown of an Internet provider thought to be helping spread one of the most promiscuous pieces of malicious software out there appears to have cut off criminals from potentially millions of personal computers under their control.

But the victory was short-lived. Less than a day after a service known as "AS Troyak" was unplugged from the Internet, security researchers said Wednesday it apparently had found a way to get back online, and criminals were reconnecting with their unmoored machines.



The drama initially raised hopes of a sharp drop-off in fraud, because criminals could no longer communicate with many computers infected with a type of malware known as "ZeuS," which is mostly used to steal online banking usernames and passwords. Hundreds of criminal operations around the world use the malware.



It's unknown how many computers are infected with ZeuS, but it's estimated to be in the millions. Cisco said as many as 25 per cent of the world's ZeuS-infected machines were unplugged from the massive "botnet" overnight with the takedown of AS Troyak.



Botnets are networks of infected PCs that behave like criminals' remote-control robots. They steal identities en masse and are used to attack Web sites.



But instead of a slam-dunk victory, the incident wound up highlighting the whiplash pace at which criminals can resurrect their illicit businesses after what should have been a devastating setback.



RSA, the security division of EMC Corp., said dozens of malicious servers that criminals used to spread ZeuS were connected to the Internet by AS Troyak. The service inexplicably went dark Tuesday, severing the ties between criminals and ZeuS-infected machines under their control.



It's not publicly known who pulled the plug. It could have been law enforcement, security researchers, or even the criminals themselves if they decided to move their operations to other servers.



Shutting down malware operations is a constant cat-and-mouse game.



Some services exist solely to host malicious content, and when their connections to the Internet are severed, it's often relatively easy to find another provider willing to sell them a new connection.



RSA researchers wrote in a note to clients that their experience shows that "these kinds of drastic changes are usually short-lived, as in the long run, criminals tend to restructure their criminal activity and relaunch their online attacks."



That apparently happened - and quickly. By Wednesday, researchers said the servers appeared to be back online, through a new Internet provider.



Cisco researchers said a total of 68 command-and-control servers were brought down, but that it's unknown how many infected computers were connected to each of those.



But they added that the criminals may have known the servers were going to be brought down, because traffic to those servers spiked over the weekend, suggesting they were directing infected computers to point to new servers.



One of the most high-profile takedowns of a malicious Web site hosting service involved a company called McColo Corp. whose Internet service was severed in the winter of 2008 after researchers amassed evidence of the company's wrongdoing.



Worldwide spam volumes almost instantly dropped by half, but within days started climbing again.

PROMOTED VIDEO
Life and Style
ebookA wonderful selection of salads, starters and mains featuring venison, grouse and other game
Life and Style
Phillips Idowu, Stella McCartney and Jessica Ennis
fashionMcCartney to continue designing Team GB Olympics kit until 2016
Sport
Shinji Kagawa and Reece James celebrate after the latter scores in Manchester United's 7-0 victory over LA Galaxy
football
Voices
voicesGood for Lana Del Rey for helping kill that myth, writes Grace Dent
Sport
Farah returns to the track with something to prove
Commonwealth games
Life and Style
fashion Designs are part of feminist art project by a British student
Independent
Travel Shop
the manor
Up to 70% off luxury travel
on city breaks Find out more
santorini
Up to 70% off luxury travel
on chic beach resorts Find out more
sardina foodie
Up to 70% off luxury travel
on country retreats Find out more
Latest stories from i100
Have you tried new the Independent Digital Edition apps?
Independent Dating
and  

By clicking 'Search' you
are agreeing to our
Terms of Use.

ES Rentals

    iJobs Job Widget
    iJobs Gadgets & Tech

    SQL Report Analyst (SSRS, CA, SQL 2012)

    £30000 - £38500 Per Annum + 25 days holiday, pension, subsidised restaurant: C...

    Application Support Analyst (SQL, Incident Management, SLAs)

    £34000 - £37000 Per Annum + excellent benefits: Clearwater People Solutions Lt...

    Developer - WinForms, C#

    £280 - £320 per day: Progressive Recruitment: C#, WinForms, Desktop Developmen...

    Java Developer

    competitive: Progressive Recruitment: My Client are a successful software hous...

    Day In a Page

    Screwing your way to the top? Good for Lana Del Rey for helping kill that myth

    Screwing your way to the top?

    Good for Lana Del Rey for helping kill that myth, says Grace Dent
    Will the young Britons fighting in Syria be allowed to return home and resume their lives?

    Will Britons fighting in Syria be able to resume their lives?

    Tony Blair's Terrorism Act 2006 has made it an offence to take part in military action abroad with a "political, ideological, religious or racial motive"
    Beyoncé poses as Rosie the Riveter, the wartime poster girl who became a feminist pin-up

    Beyoncé poses as Rosie the Riveter

    The wartime poster girl became the ultimate American symbol of female empowerment
    The quest to find the perfect pair of earphones: Are custom, 3D printed earbuds the solution?

    The quest to find the perfect pair of earphones

    Earphones don't fit properly, offer mediocre audio quality and can even be painful. So the quest to design the perfect pair is music to Seth Stevenson's ears
    US Army's shooting star: Lt-Col Steven Cole is the man Hollywood calls when it wants to borrow a tank or check a military uniform

    Meet the US Army's shooting star

    Lt-Col Steven Cole is the man Hollywood calls when it wants to borrow a tank or check a military uniform
    Climate change threatens to make the antarctic fur seal extinct

    Take a good look while you can

    How climate change could wipe out this seal
    Should emergency hospital weddings be made easier for the terminally ill?

    Farewell, my lovely

    Should emergency hospital weddings be made easier?
    Man Booker Prize 2014 longlist: Crowdfunded novel nominated for first time

    Crowdfunded novel nominated for Booker Prize

    Paul Kingsnorth's 'The Wake' is in contention for the prestigious award
    Vladimir Putin employs a full-time food taster to ensure his meals aren't poisoned

    Vladimir Putin employs a full-time food taster

    John Walsh salutes those brave souls who have, throughout history, put their knives on the line
    Tour de France effect brings Hollywood blockbusters to Yorkshire

    Tour de France effect brings Hollywood blockbusters to Yorkshire

    A $25m thriller starring Sam Worthington to be made in God's Own Country
    Will The Minerva Project - the first 'elite' American university to be launched in a century - change the face of higher learning?

    Will The Minerva Project change the face of higher learning?

    The university has no lecture halls, no debating societies, no sports teams and no fraternities. Instead, the 33 students who have made the cut at Minerva, will travel the world and change the face of higher learning
    The 10 best pedicure products

    Feet treat: 10 best pedicure products

    Bags packed and all prepped for holidays, but feet in a state? Get them flip-flop-ready with our pick of the items for a DIY treatment
    Commonwealth Games 2014: Great Scots! Planes and pipers welcome in Glasgow's Games

    Commonwealth Games 2014

    Great Scots! Planes and pipers welcome in Glasgow's Games
    Jack Pitt-Brooke: Manchester City and Patrick Vieira make the right stand on racism

    Jack Pitt-Brooke

    Manchester City and Patrick Vieira make the right stand on racism
    How Terry Newton tragedy made iron men seek help to tackle their psychological demons

    How Newton tragedy made iron men seek help to tackle their psychological demons

    Over a hundred rugby league players have contacted clinic to deal with mental challenges of game