|
Report: Kelihos botnet making a comeback |
|
|
|
Source: H Security - Posted by Alex
|
Following a joint operation by Microsoft and Kaspersky Lab last September to disrupt Kelihos, the botnet is now said to be making a comeback and using new techniques. According to a report on Securelist, which is run by Kaspersky Lab, new samples of the Kelihos botnet have been discovered that appear to be "very similar to the initial version".
However, Kaspersky Lab researcher Maria Garnaeva says that comparing the new version of Kelihos with the original does reveal some changes. These include using a new order of operations for communication with the botnet controllers and using updated encryption keys. Garnaeva notes that, while changing keys is "quite predictable, two different RSA encryption keys are now being used which could possibly mean that two different groups are currently controlling Kelihos.
Read this full article at H Security
Only registered users can write comments.
Please login or register. Powered by AkoComment! |
