View source for Cimbot - A technical analysis

{{Publication
|Botnet=Cimbot,
|Year=2009
|Date=2009-03-16
|Editor=FireEye
|Link=https://www.fireeye.com/blog/threat-research/2009/03/cimbot-a-technical-analysis.html
|Author=Julia Wolf,
|Type=Blogpost
|Abstract=I was recently sent a .pcap file of a bot's C&C communications. Every 182 seconds, the bot would download a GIF file from vazasaki-ji.info (91.211.65.180 as of Mar 11, 2009). These GIF files however are not well-formed — that is to say, it's a GIF89a header, followed by a lot of random gibberish.
}}