Author Topic: Trojan.Whitewell: What’s your (bot) Facebook Status Today?  (Read 1872 times)

0 Members and 1 Guest are viewing this topic.

November 02, 2009, 04:33:43 pm
Read 1872 times

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
http://www.symantec.com/connect/blogs/trojanwhitewell-what-s-your-bot-facebook-status-today

Quote
Sure we have heard a lot about bots and botnets. One key component of a botnet is the command-and-control (C&C) server, which as we know can come in several flavours (IRC, Web pages, newsgroups, custom servers, etc.). Yet, here comes Trojan.Whitewell, which, being tired of old C&C channels, decides to pick up Facebook as a coordinator for the C&C server. I use the word “coordinator” because the Trojan only receives some configuration data from its Facebook account—the actual command execution and data reporting is done through a third party Web server.
Ruining the bad guy's day