Author Topic: DonBot analysis by FireEye  (Read 3713 times)

0 Members and 1 Guest are viewing this topic.

October 28, 2009, 06:48:29 pm
Read 3713 times


  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335

Donbot is primarily a spam bot, one of the few spam botnets whose growth was not hampered by the McColo shutdown earlier this year.  As a matter of fact, the sudden shut down of big spammers like Srizbi and Rustock helped Donbot climb the spam botnet rankings.  In this article I am going discuss different aspects of Donbot, first as a malware and then in the later half I will try to shed some light on its command and control architecture.
Ruining the bad guy's day