The Kraken botnet is a network hacking spyware program that attacks Microsoft Windows and Apple Macintosh systems through email and World Wide Web sites such as social networking sites. It was the world's largest botnet as of April 2008.[update]
Researchers say that Kraken infected machines in at least 50 of the Fortune 500 companies and grew to over 400,000 bots.[1] It was estimated to send 9 billion spam messages per day. Kraken botnet malware may have been designed to evade anti-virus software, and employed techniques to stymie conventional anti-virus software.[2]
YouTube Encyclopedic
-
1/3Views:16 1589288 120
-
DEF CON 22 - Pierce and Loki - NSA Playset : GSM Sniffing
-
DEFCON 16: Malware RCE: Debuggers and Decryptor Development
-
DEF CON 24 - Lucas Lundgren, Neal Hindocha - Light Weight Protocol: Critical Implications
Transcription
History
The Kraken botnet was first discovered in 2008 by security firm Damballa. Researchers described it as the largest botnet discovered at the time, compromising over 400,000 infected machines. This was more than twice the size of the Storm botnet, which was previously considered to be the largest zombie network.[2]
Prevalence In a 24-hour period on March 25, 2008, Kraken was observed to have infected 409,912 unique IP addresses. Researchers predicted the botnet would grow to over 600,000 nodes within two weeks. The botnet infiltrated machines inside major corporations, including over 50 Fortune 500 companies.[2][3]
Action
Kraken is believed to spread primarily through social engineering, by tricking users into clicking on malicious files disguised as images. Once executed, the Kraken malware copies itself to the victim's hard drive in a slightly altered format, allowing it to evade detection by antivirus software. Infected machines also regularly update themselves with new variants to avoid detection. Kraken's ability to rapidly morph its codebase has allowed it to evade detection by most antivirus products. At the time of discovery, only about 20 percent of antivirus products were detecting the malware. This code obfuscation and frequent updates have made it an extremely stealthy and evasive botnet. Once infected, the Kraken malware uses the victim's machine to send large volumes of spam advertising various scams and questionable products like high-interest loans, fake luxury goods, and gambling sites. Researchers observed bots in the network sending as many as 500,000 spam emails per day.[2]
See also
References
- ^ Higgins, Kelly Jackson (7 April 2008). "New Massive Botnet Twice the Size of Storm". Dark Reading. Retrieved 7 April 2008.
- ^ a b c d Goodin, Dan (7 April 2008). "Move over Storm – there's a bigger, stealthier botnet in town". The Register. Retrieved 7 April 2008.
- ^ "RSA 2008 : Kraken, le nouveau botnet géant - Le Monde Informatique". LeMondeInformatique (in French). 2008-04-09. Retrieved 2024-02-14.
External links
- Fisher, Dennis, Kraken botnet balloons to dangerous levels Archived 2011-01-11 at the Wayback Machine, SearchSecurity.com, Apr. 7, 2008, retrieved 2008-04-07
- Orion, Egan, There's a new botnet worm on the loose: Kraken seeks to sink the Fortune 500, The Inquirer, April 7, 2008, retrieved 2008-04-07
- Neri, Kraken Botnet, la Botnet mas grande del Mundo, retrieved 2008-04-07, en español.
- Pierce, Cody, [1]
- Amini, Pedram, Kraken Botnet Infiltration, 2008-04-28, retrieved 2008-04-28
 | This malware-related article is a stub. You can help Wikipedia by expanding it. |
This page was last edited on 14 February 2024, at 09:45