[LINK] botnet bigger than storm?

[Kim Holburn]

http://www.darkreading.com/security/attacks/showArticle.jhtml;jsessionid=J2N12SRZKGSNIQSNDLRSKH0CJUNN2JVN?articleID=217000166
http://it.slashdot.org/article.pl?sid=09/04/22/2223214

> Researchers have discovered a major botnet operating out of the  
> Ukraine that has infected 1.9 million machines, including large  
> corporate and government PCs mainly in the U.S.
>
> The botnet, which appears to be larger than the infamous Storm  
> botnet was in its heyday, has infected machines from some 77  
> government-owned domains -- 51 of which are U.S. government ones,  
> according to Ophir Shalitin, marketing director of Finjan, which  
> recently found the botnet. Shalitin says the botnet is controlled by  
> six individuals and is hosted in Ukraine.


Although the researchers say:

> Overall, the cybergang can remotely execute anything it likes on the  
> infected computers.
>
> The log file on the server disclosed the IP addresses of the  
> infected computers and their names in the network. After running  
> them via our Geo IP database we found the following distribution of  
> the botnet around the world:
>
>     * US:       45%

>     * UK:        6%
>     * Canada:    4%
>     * Germany:   4%
>     * France:    3%
>     * Other:    38%
>
> In conclusion, we notice that the volume of infected computers that  
> we identify around the world keeps growing year by year.

-- 
Kim Holburn
IT Network & Security Consultant
Ph: +39 06 855 4294  M: +39 3494957443
mailto:kim at holburn.net  aim://kimholburn
skype://kholburn - PGP Public Key on request