https://www.botnets.fr/index.php?action=history&feed=atom&title=Kelihos_botnet_appears_again_with_new_variantKelihos botnet appears again with new variant - Revision history2026-10-24T00:46:02ZRevision history for this page on the wikiMediaWiki 1.43.11https://www.botnets.fr/index.php?title=Kelihos_botnet_appears_again_with_new_variant&diff=2808&oldid=prevEric.freyssinet: 1 revision imported2015-02-07T14:29:35Z<p>1 revision imported</p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="en">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 14:29, 7 February 2015</td>
</tr><tr><td colspan="4" class="diff-notice" lang="en"><div class="mw-diff-empty">(No difference)</div>
</td></tr>
<!-- diff cache key wiki:diff:1.41:old-2807:rev-2808 -->
</table>Eric.freyssinethttps://www.botnets.fr/index.php?title=Kelihos_botnet_appears_again_with_new_variant&diff=2807&oldid=prevEric.freyssinet at 20:41, 11 February 20132013-02-11T20:41:42Z<p></p>
<p><b>New page</b></p><div>{{Publication<br />
|Link=http://secureconnexion.wordpress.com/2013/02/11/kelihos-botnet-appears-again-with-new-variant/ secureconnexion.wordpress.com<br />
|Author=Jay Pfoutz<br />
|NomRevue=Secure Connexion<br />
|Date=2013-02-11<br />
|Editor=Secure Connexion<br />
|Year=2013<br />
|Botnet=Kelihos<br />
|Abstract=Kelihos appears again with a new variant as many researchers have discovered. The variant enables it to remain dormant on the machine with sinkholing techniques, and other rootkit-style operations. It hides domains, and does many other things to conceal itself, as researchers have discovered.<br />
<br />
This is the third attempt for the Kelihos botnet. When it got shutdown back in 2011 by a collaborative effort between Kaspersky Lab and Microsoft, it was figured that it was a P2P botnet, which made it more difficult to shutdown completely all operations for the botnet. At least its main servers were cut off, but it didn’t stop the malware from spreading since tons of blackhats still had the malcode on their own server/computer.<br />
}}</div>Eric.freyssinet