NARROWING THE GAP

摘要

While monitoring botnet traffic and controllers back in mid-2009, volunteers working for The Shadowserver Foundation noticed a new tactic being taken among the Waledac family of bot trojans that would usher in a new era of criminal sophistication. Waledec was exploiting DNS (domain name system) providers to self-register sites with names that seemed associated with legitimate service provider Blizzard Image Hosting. Then it used Blizzard's real addresses and URLs to blast the spam that also included links to the malicious, prereg-istered domains.