Rustock: Difference between revisions

Revision as of 14:05, 19 April 2015

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Rustock
Alias	Meredrop
Group	Spamming
Parent
Sibling
Family
Relations	Variants: Sibling of: Parent of: Distribution of: Campaigns:
Target
Origin
Distribution vector	Harnig
UserAgent
CCProtocol	HTTP (Centralized)
Activity	/
Status
Language
Programming language
Operation/Working group	Operation b107

	Author	Editor	Year
An overview of messaging botnets	François Paget	McAfee	2013
Battling the Rustock threat	Marc Lauricella Holly Stewart T.J. Campana David Anselmi Richard Boscovich Samantha Doerr Oleg Petrovsky Tareq Saade	Microsoft	2011
Detection and classification of different botnet C&C channels	Gregory Fedynyshyn Mooi Choo Chuah Gang Tan	Lehigh University. Bethlehem	2009
Harnig is back	Atif Mushtaq	FireEye	2011
Spambot evolution 2011	SecureWorks' Counter Threat Unit	DELL SecureWorks	2011
Taking down botnets: Microsoft and the Rustock botnet	Richard Boscovich	Microsoft	2011
The Sality botnet	Nicolas Falliere	Symantec	2010
Top spam botnets exposed	Joe Stewart	DELL SecureWorks	2008

@@ Line 1: / Line 1: @@
 {{Botnet
+|Alias=Meredrop
+|Vector=Harnig,
+|CCProtocol=HTTP
+|Group=Spamming
 |Fonctionnalités=* [[feature::Template-based spam]]
 |Commandes=* Chaînes caractéristiques: tmpcode.bin, unluckystrings, filesnames
 |Infrastructure=* Port 80
-|CCProtocol=HTTP
-|Group=Spamming
-|Alias=RKRustok
-|Alias=Costrat
-|Alias=Meredrop
 }}