Windows 10: IoT botnet infects 100,000 routers to send spam

Brink · Nov 7, 2018

A new botnet made up of roughly 100,000 home routers has silently grown over the past two months. According to current evidence, the botnet's operators appear to use the infected routers to connect to webmail services and are most likely sending out massive email spam campaigns.

First spotted this September by the Netlab team at Qihoo 360, the botnet has been exploiting a well-known five-year-old vulnerability to spread.

The vulnerability was discovered in 2013 by security researchers from DefenseCode and resides in the Broadcom UPnP SDK, a piece of software that was embedded in thousands of router models from multiple vendors.

The vulnerability allows an attacker to execute malicious code on a remote vulnerable router without needing to authenticate, and it's the worse kind of vulnerability that exists in the world of Internet-connected devices...
Click to expand...

Read more: IoT botnet infects 100,000 routers to send Hotmail, Outlook, and Yahoo spam | ZDNet

See also: BCMPUPnP_Hunter: A 100k Botnet Turns Home Routers to Email Spammers

:)

Wrigleyvillain · Nov 7, 2018

MS Leads Shut Down Of Rustock--MAJOR Spam Botnet

Microsoft's Digital Crimes Unit, working with federal law enforcement agents, has brought down the world's largest spam network, Rustock. Rustock, at its peak, was a botnet of around 2 million spam-sending zombies capable of sending out 30 billion spam email per day. Microsoft's wholesale slaughter of Rustock could reduce worldwide spam output by up to 39%.

Rustock was taken down, piece by piece, in a similar way to the Mega-D botnet. First the master controllers, the machines that send out commands to enslaved zombies, were identified. Microsoft quickly seized some of these machines located in the U.S. for further analysis, and worked with police in the Netherlands to disable some of the command structure outside of the U.S. With the immediate threat disabled, Microsoft then worked with upstream providers to black hole the IP addresses of whoever was controlling the botnet. To prevent further master controllers popping up, Microsoft worked with Chinese CN-CERT to block registration of domains that could be used by new command and control servers.

Finally, Microsoft is now working with ISPs and CERTs around the world to help clean the Rustock malware from around 1 million infected machines. It's also worth noting that Microsoft didn't do this alone; specialists from Pfizer, FireEye (the company behind the Mega-D botnet takedown), and the University of Washington helped out.
Click to expand...

Interesting tale and very good news.

Source

Charliedog · Nov 7, 2018

Windows Live Mail 2012 refuses to send emails, claims they're spam

My wife uses Windows Live Mail 2012 and says it refuses to send emails, claiming they're spam. This is even replying to someone who is in her contacts list. I have run several different virus checks and nothing comes up. Any ideas or suggestions would be appreciated. TIA

IggSter · Nov 7, 2018

How to factory reset Cisco 1700 Router

Hopefully I can help you here....its a very common thing to happen.

First, I take it you dont know the passwords for console access or telnet/ssh?

I will assume that these devices belong to you.

step 1. Plug a cisco console cable into a serial port on your pc
step 2. Plug other end into Cisco console port
step 3. Using hyperterm or putty or similar connect to the serial port
step 4. boot router, and make sure you clearly can see the output (this confirms you have good serial comms)
step 5. if this fails, adjust the comm port settings (9600, 8,1,n are the default)
step 6. now you have to do the only hard part...send the break command:

Break command list: Break Commands

Go down the list and match your OS and SW and try the sequence suggested.

If this fails several times do what I do: Install putty (free) and then to send a break so you can get into rommom just hit "ctrl-a b".

Windows 10: IoT botnet infects 100,000 routers to send spam

IoT botnet infects 100,000 routers to send spam

IoT botnet infects 100,000 routers to send spam

IoT botnet infects 100,000 routers to send spam

IoT botnet infects 100,000 routers to send spam - Similar Threads - IoT botnet infects

Alljoyn router 100% cpu?

Alljoyn router 100% cpu?

Botnet

Botnet

Botnet

I am 100% infected!!!

Microsoft Hijacks Necurs Botnet that Infected 9 Million PCs Worldwide

Botnet

CIA Infection of Routers