[ insider_reports_insider ]
Botnets Increase Four Fold Over Summer
SecurityProNews
Staff Writer
2008-09-04
 Insider Reports RSS Feed
Both the number of botnets and the size of individual botnets have quadrupled in the past 90 days, according to security researchers. Despite the sudden influx, spam and malware has not increased correspondingly, making the case more mysterious.
 | | Botnets Increase Four Fold Over Summer |  |
John Bambanek at Internet Storm Center points to Shadow Server to illustrate the tremendous spate of botnet activity over the summer. Typically, when botnets increase, so does new malware like viruses, spyware, and spam.
"I imagine that the bad guys have gotten better about keeping machines owned, but there is one vector that we need to get much better about tracking and managing, and that's direct web-based malware. The timing, very roughly, coincides with when we started to see increase SQL injection attacks against webservers (mind you, this is an educated guess that SQL injections are a big part of this, not a statement of fact)."
Though malware-fighters are very adept at tracking email spam from zombie machines, Bambanek notes the difficulty in scanning the entire Internet to find malware that possibly has been injected deep into websites. Still, you might expect to see an increase in new viruses after the fact.
One theory has suggested the summer botnet increase is attributable to bored students being off from school. Time will tell if the botnet attacks decrease, increase or stay level as September continues.
This probably has nothing to do with it and even if so you could bet on denial, but in May, Colonel Charles W. Williamson III made a pretty convincing case at the Armed Forces Journal for military use of botnets as a preemptive maneuver to counter foreign cyber warfare botnets. He compares his strategy to taking out planes before they can even leave the ground.
It was around that time the Air Force was tasked with creating its Cyber Command to dominate cyberspace. Cyber Command was suspended in mid-August, due to some power-chain shakeups and standard bureaucracy. Coincidentally, the vice chief of Cyber Command was reassigned to the Pentagon this week.
Though the Air Force couldn't get off the ground with the cyber command, could it be possible another branch or agency or foreign military is unleashing the flood of botnets as a test or as some kind of surveillance?
About the Author:
SecurityProNews is a daily online and email publication focusing on internet security issues.
More insider_reports_insider Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
