Pushdo Trojan Infects 11,000 Systems In 24 Hours 32
An anonymous reader writes Bitdefender has discovered that a new variant of the Trojan component, Pushdo, has emerged. 77 machines have been infected in the UK via the botnet in the past 24 hours, with more than 11,000 infections reported worldwide in the same period. The countries most affected so far by the Pushdo variant are India, Vietnam and Turkey. Since Pushdo has resurfaced, the public and private keys used to protect the communication between the bots and the Command and Control Servers have been changed, but the communication protocol remains the same.
Missing information (Score:3, Insightful)
What operating system does this software run on?
Re:Missing information (Score:4, Interesting)
This is what I was wondering... AFAICT the first link is /.'ed and the second link doesn't go in to any technical details. I'm assuming Windows until I hear otherwise but the geographic mix is interesting; are these Windows XP boxes? Is the fact that the infections are concentrated in India and Asia an indication of the many people there that have not upgraded?
I'd never heard of Pushdo before this, anyone else know more about it?
Re: (Score:1)
These are systems which were previously infected with Pushdo, so yes, some of them are XP.
Re: Missing information (Score:2)
Google cache has the first link but it also does not mention platforms!
Re: (Score:2)
Well it runs on Windows obviously. With the number of reported infections, the speed with which it happened, and the fact that it is a Trojan (meaning you need to trick the user into running it), it can only be Windows. There wouldn't be 11,000 Linux users tricked into running it in 24 hours even if it would run correctly on all their distros because we know Linux users are too smart to run Trojans. Hell, there probably weren't 11,000 Linux machines with users sitting in front of them to BE tricked into running it in that amount of time. With Macs - well every Mac user will tell you they don't get Trojans or viruses. That leaves Windows. Lots of doofuses to be tricked there.
While I can appreciate your sarcasm, I also followed the summary's first link to the report at labs.bitdefender.com, and thought it was interesting that in the "Related posts" in the column at the right, there's a Tags section, and the very first is "android" in a large font. There's no instance of "window" or "micro" or "soft" on the page. The obvious inference to a reader is "Hmmm ... Can this actually be a major infestation on android, i.e., linux?"
But no, this list of "Related ... Tags" appears to b
Re: (Score:2)
Determining what is "related" is not an easy thing to do, programmatically speaking.
It's especially difficult for the Media, since for most of them, "computer", "IBM machine", "Microsoft" and "Windows" are synonyms. A few have heard of things like unix and linux, and some even use a mac. But hose gadgets are never called "computers", so they're not relevant to any news story dealing with computers. In common speech, saying that some new virus infects "computers" is all that needs to be said, since there are no brand names in the computer industry, only IBM and Microsoft (and maybe Appl
Re: (Score:2)
Re:Missing information (Score:4, Insightful)
Well it runs on Windows obviously. With the number of reported infections, the speed with which it happened, and the fact that it is a Trojan (meaning you need to trick the user into running it), it can only be Windows.
This propagation rate is positively tiny. Honestly, I don't know why it's even part of the headline. For context, this paper (PDF, sorry) [thehackademy.net] shows Code Red infecting over 500,000 machines in an hour.
If 11,000 machines in a day is an event, then we should all be sitting back and breathing a sigh of relief that the bad old days are over....
(Not that I believe that they are. I just don't see any reason for the breathless headline.)
Re: (Score:3)
We always assume Windows (to the point where most articles don't even mention it) and that is true again in this case.
It is useful to know which versions of Windows:
Systems affected:
The Pushdo trojan malware affects the following systems:
Windows 2003
Windows XP
Windows 2000
Windows NT
Windows 98
Windows 95
Re: (Score:3, Insightful)
11k...? (Score:2)
I just don't understand how this is worth a headline on Slashdot. The targeted population centers alone are so vast and connected that 11k is a pittance. The common flu probably has a greater influence there.
Re: (Score:2)
Is this a ZeuS variant? (Score:3)
The way the article describes Pushdo, it sounds a lot like ZeuS - they use practically the same methods of operation (DGA to generate random domain names, fast-flux to stop anyone shutting down the C&C servers) and it seems that like ZeuS, Pushdo started from an initial codebase and was changed multiple times after being shut down.
Re: (Score:3)
No-Ip (Score:3)
Country least affected... (Score:2)
Okay so a bitdefender ad ? What's the Vector? (Score:2)
Is this distributed by E-Mail, a bug in Windows? IE, Firefox etc.?
Just use Linux. (Score:1)
Just use Linux.