Coreflood is a Trojan and botnet created by a group of Russian hackers was released in 2010 in its present version, but has been used in previous versions for over a decade. It is currently estimated at 2.3 million PCs worldwide and remains a threat. Backdoor.coreflood
Your component is a Trojan that opens a remote access mechanism allowing other computers to use them remotely. Also, save all keystrokes, which generally is used to find user keys in remote locations, phone numbers, bank accounts and credit cards and private information that can then be resold to blackmail users en su localidad.
El FBI logró infiltrar esta red y cuando el bot intenta conectarse con direcciones de control para pedir órdenes se le está ordenando desactivarse, pero al reiniciar nuevamente el equipo infectado el bot vuelve a reactivarse.
El paso siguiente será informar a los proveedores de internet para que a su vez ellos informen a sus usuarios infectados y Microsoft planea distribuir una actualización de su herramienta gratuita de eliminación de software malicioso para eliminar este bot a distancia.
Si no se desinfectan las máquinas, los usuarios podrían ser víctimas de ataques continuos, exponiéndolos a una pérdida de privacidad y bienes. Además, los hackers could find ways to regain control of the network thus lose the effort made so far.
Beside this, the FBI reports that in 2010 were detected fraudulent wire transfers over $ 11 million in 20 incidents. In particular, theft of more than fifty thousand dollars have been linked to attacks coreflood.
However, remote computer intervene to remove the bot is not a safe operation. Something could go wrong and a sanitized machine might stop start causing a potential loss of information for users who were not aware that his machine was compromised.
Related
- Coreflood English Wikipedia
- With Court Order, FBI hijacks 'Coreflood' Botnet, Sends Signal Kill, Kim Zetter, April 13, 2011
- Friendly takeover: FBI controls bot PCs, 14 April 2011, The H security related courses
