Malicious Bots: An Inside Look into the Cyber-Criminal Underground of the Internet

Originally designed as neutral entities, computerized bots are increasingly being used maliciously by online criminals in mass spamming events, fraud, extortion, identity theft, and software theft. Malicious Bots: An Inside Look into the Cyber-Criminal Underground of the Internet explores the rise o...

Mô tả đầy đủ

Đã lưu trong:
Chi tiết về thư mục
Những tác giả chính: Dunham, Ken, Melnick, Jim
Định dạng: Sách
Ngôn ngữ:English
Được phát hành: CRC Press 2009
Truy cập trực tuyến:http://scholar.dlu.edu.vn/thuvienso/handle/DLU123456789/1653
Các nhãn: Thêm thẻ
Không có thẻ, Là người đầu tiên thẻ bản ghi này!
Thư viện lưu trữ: Thư viện Trường Đại học Đà Lạt
id oai:scholar.dlu.edu.vn:DLU123456789-1653
record_format dspace
institution Thư viện Trường Đại học Đà Lạt
collection Thư viện số
language English
description Originally designed as neutral entities, computerized bots are increasingly being used maliciously by online criminals in mass spamming events, fraud, extortion, identity theft, and software theft. Malicious Bots: An Inside Look into the Cyber-Criminal Underground of the Internet explores the rise of dangerous bots and exposes the nefarious methods of some “botmasters”. In doing so, this valuable resource assists information security managers in understanding the scope, sophistication, and criminal uses of bots. Exposes Previously Unreported Attacks! Accessibly written, but with sufficient technical detail to empower IT professionals, this volume provides in-depth coverage of the top bot attacks against financial and government networks over the last several years and exposes the who, the how, and the why behind these attacks. The book presents exclusive details of the operation of the notorious Thr34t Krew, one of the most malicious bot herder groups in recent history. Largely unidentified by anti-virus companies, their bots spread globally for months, launching massive distributed denial of service (DDoS) attacks and warez (stolen software distributions). For the first time, this story is publicly revealed, showing how the botherders got arrested, along with details on other bots in the world today. Unique descriptions of the criminal marketplace – how criminals make money off of your computer – are also a focus of this exclusive book! Shows how a great deal of online crime occurs! With unprecedented detail, the book goes on to explain step-by-step how a hacker launches a botnet attack, providing specifics that only those entrenched in the cyber-crime investigation world could possibly offer. Ken Dunham and Jim Melnick, the authors of this revealing exposé, serve on the front line of critical cyber-attacks and countermeasures as experts in the deployment of geopolitical and technical bots. Their work involves advising and briefing upper-level government officials and executives who control some of the largest networks in the world. By examining the methods of the Internet predators who are exposed in this book, information security managers will be better armed against these cyber-criminals and better able to more proactively protect their own networks from such attacks.
format Book
author Dunham, Ken
Melnick, Jim
spellingShingle Dunham, Ken
Melnick, Jim
Malicious Bots: An Inside Look into the Cyber-Criminal Underground of the Internet
author_facet Dunham, Ken
Melnick, Jim
author_sort Dunham, Ken
title Malicious Bots: An Inside Look into the Cyber-Criminal Underground of the Internet
title_short Malicious Bots: An Inside Look into the Cyber-Criminal Underground of the Internet
title_full Malicious Bots: An Inside Look into the Cyber-Criminal Underground of the Internet
title_fullStr Malicious Bots: An Inside Look into the Cyber-Criminal Underground of the Internet
title_full_unstemmed Malicious Bots: An Inside Look into the Cyber-Criminal Underground of the Internet
title_sort malicious bots: an inside look into the cyber-criminal underground of the internet
publisher CRC Press
publishDate 2009
url http://scholar.dlu.edu.vn/thuvienso/handle/DLU123456789/1653
_version_ 1757653993288368128
spelling oai:scholar.dlu.edu.vn:DLU123456789-16532009-12-04T02:50:18Z Malicious Bots: An Inside Look into the Cyber-Criminal Underground of the Internet Dunham, Ken Melnick, Jim Originally designed as neutral entities, computerized bots are increasingly being used maliciously by online criminals in mass spamming events, fraud, extortion, identity theft, and software theft. Malicious Bots: An Inside Look into the Cyber-Criminal Underground of the Internet explores the rise of dangerous bots and exposes the nefarious methods of some “botmasters”. In doing so, this valuable resource assists information security managers in understanding the scope, sophistication, and criminal uses of bots. Exposes Previously Unreported Attacks! Accessibly written, but with sufficient technical detail to empower IT professionals, this volume provides in-depth coverage of the top bot attacks against financial and government networks over the last several years and exposes the who, the how, and the why behind these attacks. The book presents exclusive details of the operation of the notorious Thr34t Krew, one of the most malicious bot herder groups in recent history. Largely unidentified by anti-virus companies, their bots spread globally for months, launching massive distributed denial of service (DDoS) attacks and warez (stolen software distributions). For the first time, this story is publicly revealed, showing how the botherders got arrested, along with details on other bots in the world today. Unique descriptions of the criminal marketplace – how criminals make money off of your computer – are also a focus of this exclusive book! Shows how a great deal of online crime occurs! With unprecedented detail, the book goes on to explain step-by-step how a hacker launches a botnet attack, providing specifics that only those entrenched in the cyber-crime investigation world could possibly offer. Ken Dunham and Jim Melnick, the authors of this revealing exposé, serve on the front line of critical cyber-attacks and countermeasures as experts in the deployment of geopolitical and technical bots. Their work involves advising and briefing upper-level government officials and executives who control some of the largest networks in the world. By examining the methods of the Internet predators who are exposed in this book, information security managers will be better armed against these cyber-criminals and better able to more proactively protect their own networks from such attacks. Introduction to Bots Thr34t Security Krew and the TK Worm The Investigation of the Thr34t Krew - Lance Mueller First DYNDNS Account (BestIce) Second DYNDNS Account (Phreeze) Third DYNDNS Account (d00m) Seth Fogie Help with Technical Details A Trip across the Pond Sitexec DiSice XaNith Sitexec Second Search Warrant Sweep Jadaka Mr40 Thr34t Krew Investigation Concluding Comments Demonstration: How a Hacker Launches a Botnet Attack Step 1: Find, Modify, and Build a Bot Step 2: Customize the Binary for Attack Step 3: Launch the Attack Step 4: Managing the Botherd Step 5: Payloads, with an Emphasis on “Pay” Introduction to the Use of Botnets in Criminal Activity Timeline Bots: A Pathway to Criminalization of the Information Age Bots: The Integrated Business Solution for Criminals “Botmasters” Who Were Caught International Botnet Task Force Conferences Operation “Bot Roast” I and II How Big Do Botnets Need to Be to Pose a Serious Threat? Peering Inside the IRC Botnet Post-IRC-Based Bots Botnet Attack Statistics Botnet Features and the Criminal Enterprise A Modular Approach to Botnets: A Major Aid to Criminals Granular Spreading Capabilities A “Service Bot” The Degradation Feature of Botnets and Its Impact on Criminal Activity Changes in the Management of Botherds Botherds through the Eyes of a Criminal Mind Criminal Vectors Utilizing Bots Theft of Sensitive Information DDoS Attacks and Extortion Bot for Rent or Hire Spam Spam Bots and Criminalization Pump-and-Dump Fraud Covert Communications Click Fraud and Affiliate Abuse Adware Abuse Taking Out the Competition Botnets and the eCrime Cycle: The iSIGHT Partners’ Approach Technical Introduction to Bots Common Ports Command and Control Strategies IRC C&C Peer-to-Peer C&C Web-Based C&C Use of Encryption or Obfuscation Types of Distributed Denial of Service (DDoS) Attacks Introduction to Selected Bots AgoBot SDBot PhatBot The Infamous Hang-UP Team and IRC-Based Fraud Operations Reptile ZoTob PBot Tsunami Kelvir MetaFisher Storm Mitigation Glossary Bibliography 2009-12-04T02:50:18Z 2009-12-04T02:50:18Z 2008 Book http://scholar.dlu.edu.vn/thuvienso/handle/DLU123456789/1653 en application/rar CRC Press