Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Botnet Malware code modifier's competition continues SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network
https://isc.sans.edu/honeypot.html

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Botnet Malware code modifier's competition continues
Trend Micro's analysis of WORM_MYTOB.KV and WORM_FANBOT.H mention some strings in the HOSTS file indicative of the ever ongoing competition between the botnet malware "modifiers", including the strings;
 "HellBot3 have BackDoor in 'HellMsn.h'. The HellBot3 author is an idiot!!!
Play with The best, Die like the rest."
Sheesh, upon reflection, the strings above make me miss Gobbles, whose flames rank right up there as all-time classics.

Patrick

193 Posts

Sign Up for Free or Log In to start participating in the conversation!