Author Topic: Trojan.Whitewell: What’s your (bot) Facebook Status Today?  (Read 2601 times)

0 Members and 1 Guest are viewing this topic.

November 02, 2009, 04:33:43 pm
Read 2601 times


  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335

Sure we have heard a lot about bots and botnets. One key component of a botnet is the command-and-control (C&C) server, which as we know can come in several flavours (IRC, Web pages, newsgroups, custom servers, etc.). Yet, here comes Trojan.Whitewell, which, being tired of old C&C channels, decides to pick up Facebook as a coordinator for the C&C server. I use the word “coordinator” because the Trojan only receives some configuration data from its Facebook account—the actual command execution and data reporting is done through a third party Web server.
Ruining the bad guy's day