Demise Of Storm Botnet Clears Way For More Nimble BotnetsDemise Of Storm Botnet Clears Way For More Nimble Botnets
A number of security researchers now say the infamous Storm botnet, which has been quiet for about a month, could very well be dead. Some are saying the era of big botnets may be over.
October 14, 2008
A number of security researchers now say the infamous Storm botnet, which has been quiet for about a month, could very well be dead. Some are saying the era of big botnets may be over.Not that they'll be missed.
According to this story which ran in Dark Reading today, Paul Royal, director of research for anti-botnet security vendor Damballa, says "This is the end of the really gigantic botnet as we know it."
Don't declare "Mission Accomplished" anytime soon, though. We've witnessed a similar progression, should Royal be correct in his prediction, before. Viruses like the LoveBug that tore through e-mail servers in 2000, or worms such as SQL Slammer and Blaster, are largely a relic of the past. Sure, we may see another big worm or virus outbreak, but the trend is toward quieter, stealthier Trojans and spyware.
You see, it's tough to turn a profit if everyone knows you've infected them.
Security researchers say the same could now be true of botnets:
"Even if turns out that this lull was merely the quiet before a Storm surge, it's unlikely that even a reinvented Storm -- now at about 47,000 infected machines, according to Damballa -- would ever operate at the massive size it once was, at close to a half-million bots at its peak in early January. This is likely the end of the era of massive botnets, and the beginning of a new generation of smaller, more targeted botnets, says Paul Royal, director of research for Damballa."
While it may be good riddance to the Storm botnet, down to less than 50,000 infected systems from its once 500,000 infected systems to do its spam spreading bidding, it's not the end of botnets. They'll just be smaller, more clandestine, and highly targeted.
About the Author(s)
You May Also Like
Modern Supply Chain Security: Integrated, Interconnected, and Context-DrivenNov 06, 2023
How to Combat the Latest Cloud Security ThreatsNov 06, 2023
Reducing Cyber Risk in Enterprise Email Systems: It's Not Just Spam and PhishingNov 01, 2023
SecOps & DevSecOps in the CloudNov 06, 2023
What's In Your Cloud?Nov 30, 2023
Passwords Are Passe: Next Gen Authentication Addresses Today's Threats
What Ransomware Groups Look for in Enterprise Victims
Concerns Mount Over Ransomware, Zero-Day Bugs, and AI-Enabled Malware
Everything You Need to Know About DNS Attacks
Securing the Remote Worker: How to Mitigate Off-Site Cyberattacks