Thursday, January 26, 2006

LURHQ: Current BlackWorm Statistics


BlackWork Infection Distribution by Country.
Image source: LURHQ


Via LURHQ Threat Intelligence Group.

As reported in the previous analysis, BlackWorm contacts a web stats counter to report infections. Working with the ISP hosting the counter along with the TISF BlackWorm task force, we have obtained and analyzed the logs from the counter.

An attempt was made by an unknown party to artificially inflate the counter using a set of 279 distributed (presumably compromised) computers. However, it is easy to differentiate these requests from the actual infected systems. As of the time these statistics were taken, the counter is well above 5 million, however, the actual count of infected users is closer to 300,000 worldwide and not increasing at too great a rate.

Much more here.

0 Comments:

Post a Comment

<< Home