The underground economy of spam: a botmaster's perspective of coordinating large-scale spam campaigns
(Publication) Google search: [1]
The underground economy of spam: a botmaster's perspective of coordinating large-scale spam campaigns | |
---|---|
![]() | |
Botnet | Cutwail |
Malware | |
Botnet/malware group | |
Exploit kits | |
Services | |
Feature | |
Distribution vector | |
Target | |
Origin | |
Campaign | |
Operation/Working group | |
Vulnerability | |
CCProtocol | |
Date | 2011 / Boston 2011 |
Editor/Conference | University of California, Santa Barbara & Ruhr-University Bochum |
Link | http://iseclab.org/papers/cutwail-LEET11.pdf iseclab.org (iseclab.org Archive copy) |
Author | Brett Stone-Gross, Thorsten Holz, Gianluca Stringhini, Giovanni Vigna |
Type | Conference paper"Conference paper" is not in the list (Blogpost, White paper, Scientific paper, Press article, Conference paper or presentation, Threat entry, Press release, Tech report) of allowed values for the "Type" property. |
Abstract
“ In this paper, we present a comprehensive analysis of a
large-scale botnet from the botmaster’s perspective, that highlights the intricacies involved in orchestrating spam campaigns such as the quality of email address lists, the effectiveness of IP-based blacklisting, and the reliability of bots. This is made possible by having access to a number of command-and-control servers used by the Pushdo/ Cutwail botnet. In addition, we study Spamdot.biz, a private forum used by some of the most notorious spam gangs, to provide novel insights into the underground economy of large-scale spam operations.
Bibtex
@misc{Lua error: Cannot create process: proc_open(/dev/null): failed to open stream: Operation not permitted2011BFR798, editor = {University of California, Santa Barbara & Ruhr-University Bochum}, author = {Brett Stone-Gross, Thorsten Holz, Gianluca Stringhini, Giovanni Vigna}, title = {The underground economy of spam: a botmaster's perspective of coordinating large-scale spam campaigns}, date = {Error: Invalid time.}, month = Error: Invalid time., year = {2011}, howpublished = {\url{http://iseclab.org/papers/cutwail-LEET11.pdf iseclab.org}}, }