A US-based Skunkx botnet with the potential to execute distributed denial of service (DDoS) attacks, while identifying and impeding competing DDoS clients on the host have been unveiled by the researchers at Arbor Networks, as reported by Eweek on March 16, 2011.
This bot supposedly possesses various competencies, ranging from Performing DDoS attacks (HTTP floods, SYN floods, UDP floods, and Slowloris attacks,); Detecting a number of analyst tools (TCPView, Commview, and Wireshark) and platforms (VMWare, QEMU, VirtualPC); Spread over USB, MSN, YahooMessenger; Visit" sites, speedtest, Download and install, update, to Removing arbitrary software, Detecting and stopping DDoSer, Metus, Blackshades, and IRC bots on the box, as reported by Arbor Networks on March 14, 2011. Researchers are also apparent towards the fact that, the bot has the ability to converse with "DDoSer" and can extend as a torrent file. It can also facilitate into sabotaging the logins saved in the SQLite DB by Mozilla. Commenting on the matter, Jose Nazario, Researcher at the Arbor Networks, stated that, the mystery of the unveiled host named Arbor Security Engineering and Response Team (SERT) is indicative of the fact that, bot creators have been facilitated by the underground hosting as the servers seems to travel back to Ukraine and Malaysia and operate even independently, as reported by Eweek on March 16, 2011. ... Read the rest of: Discovery of New DDoS Botnet by Arbor Networks Researchers |