Feeds

Trojans as spam robots: the evidence

Spammers pay virus writers

  • alert
  • submit to reddit

Combat fraud and increase customer satisfaction

German magazine c't says it has evidence that virus writers are selling the IP addresses of PCs infected with Trojans to spammers. Spammers use these infected systems to unlawfully distribute commercial email messages, without the knowledge of their owners.

The Trojan involved was spread by a virus called Randex. This small program contacted its 'master' through the chat protocol IRC. It was programmed to look for CD keys of games, or secretly load additional software. The Trojan was also able to install a proxy server which can be used to relay spam through the infected PCs.

A college student managed to track down the distributor of a computer virus in the UK, and the editorial staff of c't was then able to buy access to the infected machines.

c’t passed on all the information to New Scotland Yard and several individuals in different countries have been arrested, the magazine claims.

Full details in the print issue of c't, available in German from Monday February 23.

Security experts and spam fighters have always assumed that spammers use Trojans to turn home workstations into unwitting hosts or zombies in pornography and spam distribution rings. Not only can these techniques be used to bypass IP address blacklists, but also to launch DoS attacks. ®

SANS - Survey on application security programs

Whitepapers

Mobile application security study
Download this report to see the alarming realities regarding the sheer number of applications vulnerable to attack, as well as the most common and easily addressable vulnerability errors.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.