Microsoft Offers $250,000 For Rustock Botnet Operator Identity
Bounty offered in response to evidence found in discovery process, Microsoft says.
(click image for larger view)
Slideshow: 10 Massive Security Breaches
The effort to unmask and apprehend the criminals behind the massive Rustock botnet heated up Monday as Microsoft put up a $250,000 reward for new information on the botnet's operators.
Rustock--which in March was knocked offline by federal authorities and Microsoft--was able to send some 30 billion spam messages a day, such as for phony Pfizer prescription drugs and fake Microsoft lottery scams. FireEye, researchers at the University of Washington, Pfizer, the Dutch High Tech Crime Unit, and the Chinese CERT all assisted in the operation to take down the botnet, which had an army of some 1.6 million machines worldwide at its peak. And there are still some 700,000 machines infected with the botnet's malware, according to a recent report from Microsoft.
Richard Boscovich, senior attorney for Microsoft's digital crimes unit, announced today that the company had decided to supplement its civil discovery efforts with the cash reward. Last month, Microsoft published notices in two Russian newspapers in an effort to alert the Rustock operators of the civil lawsuit against them. The reward was a way to turn up the "heat as a result of the evidence we have secured during the discovery process," Boscovich said in response to an inquiry from Dark Reading. However, he did not elaborate on just what that evidence might be.
The $250,000 reward is available to anyone offering new information that results in the arrest and conviction of the Rustock operators. Microsoft will be gathering information via email, at [email protected]
"This reward offer stems from Microsoft's recognition that the Rustock botnet is responsible for a number of criminal activities and serves to underscore our commitment to tracking down those behind it. While the primary goal for our legal and technical operation has been to stop and disrupt the threat that Rustock has posed for everyone affected by it, we also believe the Rustock bot-herders should be held accountable for their actions," Boscovich said in a blog post.
Black Hat USA 2011 presents a unique opportunity for members of the security industry to gather and discuss the latest in cutting-edge research. It happens July 30-Aug. 4 in Las Vegas. Find out more and register.
The State of RansomwareRansomware has become one of the most prevalent new cybersecurity threats faced by today's enterprises. This new report from Dark Reading includes feedback from IT and IT security professionals about their organization's ransomware experiences, defense plans, and malware challenges. Find out what they had to say!
Published: 2017-05-08 unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).
Published: 2017-05-08 A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...
Published: 2017-05-08 Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.
Published: 2017-05-08 Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.