Flashback botnet shrinks to half size

Powered by SC Magazine
 

But experts say decline may not be rapid.

Flashback botnet activity decreased over the weekend as the number of compromised Mac machines trying to connect to the command-and-control server fell significantly, according to Kaspersky.

Last week, researchers at the security firm were able to infiltrate the malicious network by setting up a sinkhole, giving them the ability to monitor the botnet's traffic. On Friday it reported that an estimated 650,000 Macs were infected with the trojan.

According to a Kaspersky blog post, the number of connected bots took a significant plunge, to 248,723 on Saturday and 237,103 on Sunday.

Although the number slid by more than half, it did not indicate “that the botnet is shrinking rapidly,” according to Kaspersky expert Aleks Gostev.

Apple, which has remained mum since the outbreak began, has released two updates to Java for Mac OS X to correct the vulnerability that is enabling Flashback to spread.

The trojan is capable of a number of malevolent actions, including stealing data, hijacking search results and installing additional malware, though it doesn't seem to be targeting personal information just yet, according to experts.

Kaspersky invites users to visit flashbackcheck.com to learn if they are infected.

Copyright © SC Magazine, US edition


Flashback botnet shrinks to half size
 
 
 
Top Stories
ATO shaves $4m off IT contractor panel
Reform cuts admin burden, introduces KPIs.
 
Turnbull introduces data retention legislation
Still no definition of metadata to be stored.
 
Crime Commission prepares core systems overhaul
Will replace 30 year-old national criminal database.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
In which area is your IT shop hiring the most staff?




   |   View results
IT security and risk
  27%
 
Sourcing and strategy
  13%
 
IT infrastructure (servers, storage, networking)
  21%
 
End user computing (desktops, mobiles, apps)
  14%
 
Software development
  25%
TOTAL VOTES: 435

Vote
Would your InfoSec team be prepared to share threat data with the Australian Government?

   |   View results
Yes
  54%
 
No
  46%
TOTAL VOTES: 209

Vote