Quote:
Researchers Dave Loftus and Dennis Schwarz found the bot, now reborn as newGOZ, had ramped up its defences, dumping command and control for a more robust domain generation algorithm (DGA) and a fast flux DNS technique.
The DGA registered new domains based on time and date to make the bot more elusive.
However, researchers from across the security industry have been able to crack the DGA configurations and register the domains before newGOZ had a chance to do so, meaning the researchers would receive – and thus be able to study – traffic from compromised machines.
|
New article shows that botnet is up to 12k zombies and still growing:
http://www.theregister.co.uk/2014/08..._the_dead_as_/