Malware Domain List

Malware Related => Tools of the trade / Internet News => Topic started by: SysAdMini on November 02, 2009, 04:33:43 pm

Title: Trojan.Whitewell: What’s your (bot) Facebook Status Today?
Post by: SysAdMini on November 02, 2009, 04:33:43 pm
http://www.symantec.com/connect/blogs/trojanwhitewell-what-s-your-bot-facebook-status-today

Quote
Sure we have heard a lot about bots and botnets. One key component of a botnet is the command-and-control (C&C) server, which as we know can come in several flavours (IRC, Web pages, newsgroups, custom servers, etc.). Yet, here comes Trojan.Whitewell, which, being tired of old C&C channels, decides to pick up Facebook as a coordinator for the C&C server. I use the word “coordinator” because the Trojan only receives some configuration data from its Facebook account—the actual command execution and data reporting is done through a third party Web server.