Malware: An Inside Look at the Russian Business Network

"A new white paper published by the nonprofit botnet-tracker Shadowserver Foundation sheds some light on one segment of activity on the Russian Business Network (RBN). Shadowserver released its findings on malware associated with the so-called AS40989 group of interconnected IP networks on the RBN.

Shadowserver gathered nearly 3,000 sample pieces of malware — including Gozi, Goldun, Hupigon, Nurech, Nuklus, Pinch, Sinowal, Tibs, Xorpix, as well as dialers, downloaders, worms, adware, page hijackers, and proxies — that communicated with the AS40989 network via HTTP connections." An Inside Look at the Russian Business Network – Desktop Security News Analysis – Dark Reading

Tagged as: rbn, russian business network