View source for Doctor Web exposes 550 000 strong Mac botnet

{{Publication
|Image=Doctor_web_flashback1.png
|Botnet=Flashback,
|Malware=,
|CCProtocol=,
|Year=2012
|Date=April 4, 2012
|Editor=Doctor Web
|Link=http://news.drweb.com/show/?i=2341
|Author=,
|Abstract=Doctor Web—the Russian anti-virus vendor—conducted a research to determine the scale of spreading of Trojan BackDoor.Flashback that infects computers running Mac OS X. Now BackDoor.Flashback botnet encompasses more than 550 000 infected machines, most of which are located in the United States and Canada. This once again refutes claims by some experts that there are no cyber-threats to Mac OS X.

Systems get infected with BackDoor.Flashback.39 after a user is redirected to a bogus site from a compromised resource or via a traffic distribution system. JavaScript code is used to load a Java-applet containing an exploit. Doctor Web's virus analysts discovered a large number of web-sites containing the code. The recently discovered ones include:

godofwar3.rr.nu
ironmanvideo.rr.nu
killaoftime.rr.nu
gangstasparadise.rr.nu
mystreamvideo.rr.nu
bestustreamtv.rr.nu
ustreambesttv.rr.nu
ustreamtvonline.rr.nu
ustream-tv.rr.nu
ustream.rr.nu
|Document=
|Licence=
|Video=
|NomRevue=
|ISBN=
|Page=
|Operation=,
|Keyword=,
}}