[nsp-sec] New Daily Reports "bots" category malware types
Tim Wilde
twilde at cymru.com
Mon Jul 6 20:21:31 EDT 2009
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Teams,
Starting with the Daily Reports generated on 2009-07-08 (UTC), there
will be two new "mwtype" possibilities in the "bots" report category:
"Grum" and "Zeus". These refer to the malware commonly known by those
names, with "Zeus" being also commonly known as "Wsnpoem". The
2009-07-07 UTC update to the "bots" category description page will
include details of what to look for in these infections - you will see
that update in a few hours at this URL:
https://www.cymru.com/nsp-sec/dailyreports/bots.html
These reports are being generated through analysis of requests to known
C&Cs and pattern analysis, and are believed to be as free of false
positives as our other data sources. As always, feedback on the quality
of our data sources is welcomed, so please let us know if you have any
problems, questions, or concerns.
If you're not familiar with the Daily Reports and ASN Alerts projects,
please check out their pages in the NSP-SEC portion of our web site:
https://www.cymru.com/nsp-sec/dailyreports/
https://www.cymru.com/nsp-sec/ASN-Alert/
These pages can be accessed using your NSP-SEC mailing list username and
password, which you can reset through the mailing list interface at:
http://www.nsp-security.org/
Thanks as always for your participation in this forum and these
projects, we're proud to be able to work with all of you to be able to
keep the Internet safe and secure!
Best Regards,
Tim Wilde
- --
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iD8DBQFKUpULluRbRini9tgRApHXAJ9Y3N7oJWvfDHG02U9PiFwvNWkJlACeJbQn
9Jr09Z7PPk9hB1hy5cOVapc=
=ni9o
-----END PGP SIGNATURE-----
More information about the nsp-security
mailing list