View source for Trojan.Whitewell: what’s your (bot) Facebook status today?

{{Publication
|Botnet=Whitewell,
|CCProtocol=Facebook,
|Year=2009
|Date=2009-10-31
|Editor=Symantec
|Link=http://www.symantec.com/connect/blogs/trojanwhitewell-what-s-your-bot-facebook-status-today
|Author=Andrea Lelli,
|Type=Blogpost
|Abstract=Sure we have heard a lot about bots and botnets. One key component of a botnet is the command-and-control (C&C) server, which as we know can come in several flavours (IRC, Web pages, newsgroups, custom servers, etc.). Yet, here comes Trojan.Whitewell, which, being tired of old C&C channels, decides to pick up Facebook as a coordinator for the C&C server. I use the word “coordinator” because the Trojan only receives some configuration data from its Facebook account—the actual command execution and data reporting is done through a third party Web server.
}}