Ajay Kumar: Created a new article

2023-09-25T18:48:22Z

Created a new article

New page

{{Short description|Cybercrime malware botnet}}
'''Virut''' is a [[cybercrime]] [[malware]] [[botnet]], operating at least since 2006, and one of the major botnets and malware distributors on the Internet. In January 2013, its operations were disrupted by the Polish organization [[Naukowa i Akademicka Sieć Komputerowa]].

==Characteristics==
Virut is a malware botnet that is known to be used for cybercrime activities such as [[DDoS]] attacks, [[Email spam|spam]] (in collaboration with the [[Waledac botnet]]<ref name="Waledac Malware Could Send 3.6 Billion Spam Emails per Day from Infected PCs - Softpedia"/>), [[fraud]], [[data theft]], and pay-per-install activities.<ref name=cert/><ref name=sym/><ref name="krebsonsecurity"/> It spreads through executable file infection (through infected USB sticks and other media), and more recently, through compromised [[HTML]] files (thus infecting vulnerable browsers visiting compromised websites).<ref name=cert/><ref name=ks/> It has infected computers associated with at least 890,000 [[IP address]]es in [[Poland]].<ref name=cert/> In 2012, [[NortonLifeLock|Symantec]] estimated that the botnet had control of over 300,000 computers worldwide, primarily in [[Egypt]], [[Pakistan]] and [[Southeast Asia]] (including [[India]]).<ref name=cert/><ref name="sym"/> A [[Kaspersky Lab|Kaspersky]] report listed Virut as the fifth-most widespread threat in the third quarter of 2012, responsible for 5.5% of computer infections.<ref name=cert/><ref name="Kaspersky Security Bulletin 2012. The overall statistics for 2012"/>

==History==
The Virut botnet has been active since at least 2006.<ref name=cert/>

On 17 January 2013, Polish research and development organization, data networks operator, and the operator of the Polish "[[.pl]]" top-level [[domain registry]], [[Naukowa i Akademicka Sieć Komputerowa]] (NASK), took over twenty three domains used by Virut to attempt to shut it down.<ref name="cert"/> A NASK spokesperson stated that it was the first time NASK engaged in such an operation (taking over domains), owing to the major threat that the Virut botnet posed to the Internet.<ref name="ks"/> It is likely Virut will not be shut down completely, as some of its control servers are located at Russian "[[.ru]]" top-level domain name registrars outside the reach of the Polish NASK.<ref name=krebsonsecurity/> Further, the botnet is able to look up alternate backup hosts, enabling the criminals operating it to reestablish control over the network.<ref name=krebsonsecurity/>

==See also==

* [[Command and control (malware)]]
* [[Zombie (computer science)]]
* [[Trojan horse (computing)]]
* [[Botnet]]
* [[Alureon]]
* [[Conficker]]
* [[Gameover ZeuS]]
* [[ZeroAccess botnet]]
* [[Regin (malware)]]
* [[Zeus (malware)]]
* [[Timeline of computer viruses and worms]]

==References==
{{reflist|refs=

<ref name="Kaspersky Security Bulletin 2012. The overall statistics for 2012">{{cite web|url=https://securelist.com/kaspersky-security-bulletin-2012-the-overall-statistics-for-2012/36703/#7 |title=Kaspersky Security Bulletin 2012. The overall statistics for 2012 |publisher=Securelist |date=2012-12-10 |access-date=2020-05-19}}</ref>

<ref name="Waledac Malware Could Send 3.6 Billion Spam Emails per Day from Infected PCs - Softpedia">{{cite web|url=http://news.softpedia.com/news/Waledac-Malware-Could-Send-3-6-Billion-Spam-Emails-Per-Day-From-Infected-PC-321404.shtml |title=Waledac Malware Could Send 3.6 Billion Spam Emails per Day from Infected PCs - Softpedia |publisher=News.softpedia.com |date=2013-01-15 |access-date=2013-01-19}}</ref>

<ref name="cert">{{cite web |url=http://www.cert.pl/news/6666/langswitch_lang/en |title=CERT Polska » Blog Archive » NASK shuts down dangerous Virut botnet domains |publisher=Cert.pl |access-date=2013-01-19 |archive-date=2013-01-21 |archive-url=https://web.archive.org/web/20130121235028/http://www.cert.pl/news/6666/langswitch_lang/en |url-status=dead }}</ref>

<ref name="krebsonsecurity">{{cite web|url=http://krebsonsecurity.com/2013/01/polish-takedown-targets-virut-botnet/ |title=Polish Takedown Targets 'Virut' Botnet — Krebs on Security |publisher=Krebsonsecurity.com |date=2013-01-07 |access-date=2013-01-19}}</ref>

<ref name="ks">{{cite web|url=http://www.komputerswiat.pl/nowosci/bezpieczenstwo/2013/03/przejeto-niebezpieczne-domeny-botnetu-virut.aspx |title=•• Przejęto niebezpieczne domeny botnetu Virut | NASK odnosi sukces w walce z cyberzagrożeniami | |publisher=Komputerswiat.pl |date=1972-02-08 |access-date=2013-01-19}}</ref>

<ref name="sym">{{cite web|url=http://www.symantec.com/connect/blogs/snapshot-virut-botnet-after-interruption |title=Snapshot of Virut Botnet After Interruption | Symantec Connect Community |publisher=Symantec.com |date=2013-01-07 |access-date=2013-01-19}}</ref>
}}

{{Botnets}}

[[Category:Internet security]]
[[Category:Distributed computing projects]]
[[Category:Spamming]]
[[Category:Botnets]]
[[Category:Cybercrime in India]]

Virut - Revision history

Ajay Kumar: Created a new article