Feeds

Armenia jails Bredolab botmaster for 4 years

First computer crime conviction in the former Soviet republic

Secure remote control for conventional and virtual desktops

A cybercrook who established a 30 million computer strong botnet has been jailed for four years in Armenia.

Georgy Avanesov, 27, a Russian citizen of Armenian descent, had apparently been making a cool $125,000 a month renting out access to zombie drones in the infamous Bredolab botnet.

Other crooks used access to these compromised Windows PCs to either distribute spam, launch DDoS attacks or to mount scareware (fake anti-virus) scams. DDoS targets reportedly included Russian anti-virus firm Kaspersky Lab.

Bredolab, which disgorged more than 3 billion malicious emails a day at its peak, spread by planting malicious scripts on legitimate websites. These scripts used browsers exploits and the like to drop the zombie software onto the Windows PCs.

Components of the Bredolab malware were designed to steal usernames and passwords to FTP accounts, creating a means to plant malicious code onto more legitimate sites in the process, further multiplying the spread of infection.

Prospective marks were tricked into visiting compromised sites using spam emails with dodgy HTML attachments that posed as messages from the likes of Facebook, Skype and Amazon. Screenshots of infected email, along with commentary on the botnet and Avanesov's prosecution, can be found in a blog post by Sophos here.

"It's easy to see how such a large network of infected PCs was created, as people clicked on seemingly legitimate attachments and websites, oblivious to the infection that would go on to take control of their PC, and in some cases steal passwords and usernames," commented Graham Cluley, a senior technology consultant at Sophos. "To prevent botnets such as this forming, it is critical that website administrators don't let FTP software remember passwords, and that users are more cautious in the attachments they download."

Avanesov's downfall followed swiftly on the heels of the botnet takedown operation in October 2010.

Dutch police seized control of command & control servers associated with the Bredolab botnet, using this access to display warning messages to users with compromised PCs. Days afterwards, Avanesov was arrested at Yerevan's Zvartnots Airport in Armenia, shortly after he stepped off a late night flight from Moscow.

The 27-year-old is the first person in Armenia to be jailed for violation of Armenia's computer crime laws. Local (English language) reports on Avanesov's sentencing on Tuesday can be found here. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
Patch NOW! Microsoft slings emergency bug fix at Windows admins
Vulnerability promotes lusers to domain overlords ... oops
You really need to do some tech support for Aunty Agnes
Free anti-virus software, expires, stops updating and p0wns the world
Mozilla, EFF, Cisco back free-as-in-FREE-BEER SSL cert authority
Let’s Encrypt to give HTTPS-everywhere a boost in 2015
Meet OneRNG: a fully-open entropy generator for a paranoid age
Kiwis to seek random investors for crowd-funded randomiser
USB coding anarchy: Consider all sticks licked
Thumb drive design ruled by almighty buck
Attack reveals 81 percent of Tor users but admins call for calm
Cisco Netflow a handy tool for cheapskate attackers
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Choosing a cloud hosting partner with confidence
Download Choosing a Cloud Hosting Provider with Confidence to learn more about cloud computing - the new opportunities and new security challenges.
New hybrid storage solutions
Tackling data challenges through emerging hybrid storage solutions that enable optimum database performance whilst managing costs and increasingly large data stores.