[Aceman]

That was an interesting read. I love reading about the intricate ways in which these massive botnets work. The coders behind them are nothing short of impressive and could surely do a lot of great things if they were white hat. It's just a shame that blackhat pays so much better if you're Russian and won't get extradited to the US.

[nextbeats12]

nice one :) this is really helpful i will try it out

[hyp3ri0n]

I had to deal with a Gameover Zeus variant on a laptop at work last week. It was dropped by worm then the worm deleted itself and then the Trojan ran. The only way we caught it was because we caught the traffic being sent to a CC server. 😠

[hyp3ri0n]

Did you keep or wrote down the address of that C&C server ?

Yes, I have it documented in the incident response report I wrote up. I will post the address for the C&C it was communicating with on Monday so I can get the report from work.