Monday, July 11, 2011

Microsoft Says No botnet is indestructible

Last week researchers from security firm Kaspersky released data that they raised some time ago about the SRT-4, a new botnet that would be theoretically invincible. But Microsoft disagrees. For more secure and protected against botnet attacks is that the Redmond giant believes it can be disconnected.


Richard Boscovich, a lawyer for the Computer Crime Unit at Microsoft, said that "if someone says that a botnet is indestructible, they are not very creative" in terms of laws and technology. "Nothing is impossible," he adds, in an interview with ComputerWorld site.

Boscovich cites the case of Rustock, which was taken off the air in February this year and also used techniques similar to those of the TDL-4. They managed to shut down the network to infect the distribution table used to control infected computers, among other tactics employed.

Technically, Microsoft is right. To remove the TDL-4 from the air, just take the air along the public Kad P2P network. And her take down millions of users who also use the network legitimately. But maybe that's the price we have to pay to avoid spam nowadays, right?

Moreover, new techniques using new botnets of infection and communication do not arise every day, is not it?