Ajay Kumar: Created a new article

2023-09-25T18:42:31Z

Created a new article

New page

{{Short description|Computer botnet}}
The '''Lethic Botnet''' (initially discovered around 2008) is a [[botnet]] consisting of an estimated 210 000 - 310 000 individual machines <ref name=messagelabs>{{cite web|url=http://www.messagelabs.com/mlireport/MLI_2010_04_Apr_FINAL_EN.pdf |title=Symantec.cloud | Email Security, Web Security, Endpoint Protection, Archiving, Continuity, Instant Messaging Security |publisher=Messagelabs.com |date=2010-04-04 |accessdate=2014-01-09}}</ref> which are mainly involved in pharmaceutical and replica spam.

The botnet was most prevalent in Europe, India and Southeast Asia.<ref>{{cite web |title=Lethic botnet |url=https://www.semanticscholar.org/topic/Lethic-botnet/1701043 |website=Semantic Scholar |language=en}}</ref>

== Dismantling and revival ==
Around early January 2010 the botnet was dismantled by [[Neustar]] employees, who contacted various Lethic [[internet service providers]] in a bid to take control of the botnet's command and control servers.<ref name=theregisterundead>{{cite web|url=https://www.theregister.co.uk/2010/02/17/spam_botnet_trends/ |title=Undead botnets blamed for big rise in email malware; Grave concern over reanimated cyber-corpses |first=John |last=Leyden |work=theregister.co.uk |publisher=[[The Register]] |location=London, UK |date=2010-02-17 |accessdate=2014-01-09}} </ref><ref name=theregister>{{cite web|url=https://www.theregister.co.uk/2010/01/13/lethic_botnet_takedown/ |title=Lethic botnet knocked out by security researchers; Zombie network taken down |work=theregister.co.uk |publisher=[[The Register]] |location=London, UK |first=John |last=Leyden |date=2010-01-13 |accessdate=2014-01-09}}</ref><ref name=darkreading>{{cite web|url=http://www.darkreading.com/insiderthreat/security/vulnerabilities/showArticle.jhtml?articleID=222300408&cid=nl_DR_DAILY_2010-01-12_h |title=More Researchers Going On The Offensive To Kill Botnets |publisher=DarkReading |date= 11 January 2010|accessdate=2010-08-28}}</ref><ref name=bbc>{{cite news|url=http://news.bbc.co.uk/2/hi/technology/8570993.stm |title=Spammers survive botnet shutdowns |publisher=BBC News |date=2010-03-18 |accessdate=2010-08-28}}</ref> This move temporarily caused the botnets' spam to decrease to a trickle of its original volume.<ref name=m86takedown>{{cite web|url=http://www.m86security.com/labs/i/Lethic-botnet--The-Takedown,trace.1216~.asp |title=Lethic botnet - The Takedown |publisher=M86 Security |date= |accessdate=2010-08-28}}</ref>

In February 2010 the owners of the botnet managed to re-establish control over the botnet, through the use of new command and control servers located in the [[United States]]. The takedown has decreased the spam volume of the botnet, however. As of February 2010 the botnets' amount of spam was down to a third of its original. As of April 2010 the botnet has an estimated 1.5% share of the spam market, sending about 2 billion spam messages a day.

== See also ==
*[[Botnet]]
*[[Malware]]
*[[Internet crime]]
*[[Internet security]]
*[[Command and control (malware)]]
*[[Zombie (computer science)]]

== References ==
{{reflist|2}}

== External links ==
* [http://asert.arbornetworks.com/2009/12/lethic-spambot-analysis-pills-watches-and-diplomas/ Technical analysis of the Lethic botnet]

{{Botnets}}

[[Category:Internet security]]
[[Category:Distributed computing projects]]
[[Category:Spamming]]
[[Category:Botnets]]
[[Category:Cybercrime in India]]

{{Malware-stub}}

Lethic botnet - Revision history

Ajay Kumar: Created a new article