I think I'm gonna bless the day I was told about this site ... already I'm finding my way around and discovering that I'm not such a dummy after all ... there are 'others out there' who like me are having problems ... (small ones of course), but what is even better, is that the 'family' are so willing to help with suggestions and results. Already I've found answers to 2 problems I HAD. ... Thanks CTH, & thanks to those who post results. - margo_s 
Storm Trojan is overblown
Posted by: Tweaker
Date added: 21:43, 26th October 2007 GMT
Source: Computer World News
Reports that security researchers are running scared from hackers responsible for the Storm Trojan are overblown, say some of the people who have dug into the complex malware.
Earlier this week, Josh Corman of IBM's Internet Security Systems Inc. said that Storm, a multifaceted Trojan Horse that has been used to gather a substantial army of bots (or compromised computers), strikes back using distributed denial-of-service (DDoS) attacks when it senses probes of its command-and-control network. These attacks, Corman said, have researchers spooked.
"They're afraid," Corman told attendees at Interop New York on Tuesday. "They find these things but never say anything about them."
"No, we're not scared," said Joe Stewart, a senior security researcher at SecureWorks Inc. who has been rooting around Storm since it first appeared earlier this year. "Cautious, possibly. We're still going to do our research."
Zulfikar Ramzan, a senior principal researcher at Symantec Corp., another vendor that has been posting results from its Storm research for months, agreed. "I don't think it's made [researchers"> more scared. They're still publishing."
Corman nailed the attacks, however, Stewart and Ramzan said. Both confirmed that they knew Storm had launched DDoS attacks, and as Corman pointed out, that the Trojan has an automated early warning system that sniffs probes made of the botnet. "Storm understands any attempt to understand it, then notifies the bot controller," said Ramzan. "It seems to recognize a threat after several different attempts to probe the bot."
The tactic isn't new, but Storm has taken it to higher levels of automation, said Ramzan.
Complete Story Here.
Tools: Post a comment | Link to this news item | Send to a friend | Submit News
Error: You are not logged in.
In order to leave comments to news articles you must be a Cyber Tech Help Member.
Registration is completely free! 
Register to become a member
Along with access to leave comments to news articles you will be able to ask any computing questions you might have on the Cyber Tech Help Forums.
