Recent reports from various sources in the security industry show that a large takedown of servers associated with the “Bredolab” trojan occurred within the past few weeks. While most of the reports have focused around the idea that this infrastructure was solely related to the command and control of Bredolab, our research shows that these servers were used as an all-purpose hosting infrastructure for criminal activity.
This criminal system came to our attention in July 2010, when NetWitness analysts were asked to investigate a hacked wordpress blog.
We found that the following obfuscated script had been injected into all .html and php pages on the site:
This criminal system came to our attention in July 2010, when NetWitness analysts were asked to investigate a hacked wordpress blog.
We found that the following obfuscated script had been injected into all .html and php pages on the site:
Read more
http://www.networkforensics.com/2010/11/04/bredolab-takedown-%E2%80%93-just-the-tip-of-the-iceberg/
Posts
No comments:
Post a Comment