2010

(Year/Month)

Botnets

• Starting in 2010: Bamital, Festi, Flame, GootKit, HangOver, Leouncia, Pirpi, Ramnit, TwitterNET, VOlk, VinSelf, YoYo
• Ending in 2010:

Publications

	Author	Editor	Botnet	Campaign
All-in-one malware: an overview of Sality	Nicolas Falliere	Symantec	Sality
An evaluation of current and future botnet defences	Andrew White	Queensland University of Technology
Another family of DDoS bots: Avzhan	Jeff Edwards	Arbor Networks	Avzahn
Avalanche phishers migrate to ZeuS	Linda McGlasson	Bankinfo security	Cutwail ZeuS	Avalanche
Battling the Zbot threat	Joe Faulhaber Paul Henry Frank Simorjay Holly Stewart T.J. Campana Matt McCormack	Microsoft	ZeuS
BlackEnergy competitor – The 'Darkness' DDoS bot	Mila Parkour André M. DiMino	Shadowserver Foundation	BlackEnergy Darkness
Bleeding Life Exploit Pack	Darryl	Kahu Security
Bredolab severely injured but not dead	Atif Mushtaq	FireEye	Bredolab
Conficker working group: lessons learned	CWG	Conficker working group
Cracking down on botnets	Tim Cranton	Microsoft	Waledac
Discerning relationships: the Mexican botnet connection	Ranieri Romera	Trend Micro	Alebrije Tequila Mariachi Mehika
Feodo - a new botnet on the rise	Atif Mushtaq	FireEye	Cridex
Insights from the analysis of the Mariposa botnet	Amine Boukhtouta Prosenjit Sinha Mourad Debbabi Victor Heber Belarde		Mariposa
Koobface, un écosystème cybercriminel ou le conte des Mille et une nuits ?	Eric Freyssinet	Eric Freyssinet	Koobface
Leouncia - Yet another backdoor	Atif Mushtaq	FireEye	Leouncia
Leouncia - Yet another backdoor - Part 2	Atif Mushtaq	FireEye	Leouncia
Malware pandemics	Philip Porras Hassen Saidi Vinod Yegneswaran	Office of Naval Research	Conficker IKee.B (botnet)
Massive Drop in number of active Zeus C&C servers		Abuse.ch	ZeuS
Mexican Twitter-controlled botnet unpicked	John Leyden	The Register	Alebrije Tequila Mariachi Mehika
New IE Zero-Day used in targeted attacks	Vikram Thakur	Symantec	Pirpi
On the analysis of the ZeuS botnet crimeware toolkit	Hamad Binsalleeh Thomas Ormerod Amine Boukhtouta Prosenjit Sinha Amr M. Youssef Mourad Debbabi Lingyu Wang		ZeuS
Overcoming reputation and proof-of-work systems in botnets	Andrew White Alan Tickle Andrew Clark	IEEE	Storm
Poisoned search results: How hackers have automated search engine poisoning attacks to distribute malware	Fraser Howard Onur Komili	Sophos
Researchers: Bredolab still lurking, though severely injured	Steve Ragan		Bredolab TDL-3 TDSS
Réflexions pour un plan d'action contre les botnets	Eric Freyssinet	SSTIC
Security experts detected new Twitter-controlled botnet	Inconnu	Spamfighter	Alebrije Tequila Mariachi Mehika
Step-by-step reverse engineering malware: ZeroAccess / Max++ / Smiscer crimeware rootkit	Giuseppe Bonfa	Infosec Institute
TDL3 : The rootkit of all evil	Aleksandr Matrosov Eugene Rodionov	ESET	TDSS
Tequila botnet leads to phishing attack	Danielle Anne Veluz	Trend Micro
The IMDDOS botnet: discovery and analysis	Manos Antonakakis Christopher Elisan Aldrich de Mata Erik Wu	Damballa	IMDDOS
The Sality botnet	Nicolas Falliere	Symantec	Cutwail Maazben Rustock Storm
The anatomy of a botnet	ASERT	Arbor SERT	YoYo
The case for in-the-lab botnet experimentation: creating and taking down a 3000-node botnet	Joan Calvet Carlton R. Davis José M. Fernandez Jean-Yves Marion Pier-Luc St-Onge Wadie Guizani Pierre-Marc Bureau Anil Somayaji	Annual Computer Security Applications Conference	Waledac
The case of TDL3	Ace Portuguez	F-Secure	TDSS
The new era of botnets	Zheng Bu Pedro Bueno Rahul Kashyap Adam Wosotowsky	McAfee Labs
Under the hood of Carberp: Malware & configuration analysis		Trusteer	Carberp
Using libemu to create malware flow graph	Muhammad Najmi Ahmad Zabidi
VinSelf - A new backdoor in town	Atif Mushtaq	FireEye	VinSelf
Virus scanners for virus authors, part II	Brian Krebs	Krebs on Security