D
David H. Lipman
September 25, The Register (UK) - Sobig linked to DDoS attacks on anti-spam sites. A
senior anti-spam activist is calling on law enforcement authorities to track down the
perpetrators behind a widespread and sustained attack on anti-spam sites. The call, from
Steve Linford of Spamhaus, comes along with fresh evidence that the assaults have been
enabled by the infamous Sobig worm. Earlier this week two anti-spam services announced
their closure due to DDoS attacks, and other attempts by spammers to make their operation as
difficult as possible. Their closure follows an earlier decision to discontinue the popular
if
controversial SPEWS block list for similar reasons. Linford says that Spamhaus has been
under
constant "extremely heavy" DDoS attack since early July. He believes the attack against his
site
and others originates from Windows machines infected with the Sobig worm, controlled by
spammers over IRC networks. The Sobig worm is known to install Trojan code on infected PCs
turning them into "zombies" capable of relaying spam messages or attacking other machines.
"Sobig has created a network of tens of thousands of zombie machines that have left a DDoS
arsenal in the hands of spammers," Linford said.
Source: http://www.theregister.co.uk/content/56/33059.html
senior anti-spam activist is calling on law enforcement authorities to track down the
perpetrators behind a widespread and sustained attack on anti-spam sites. The call, from
Steve Linford of Spamhaus, comes along with fresh evidence that the assaults have been
enabled by the infamous Sobig worm. Earlier this week two anti-spam services announced
their closure due to DDoS attacks, and other attempts by spammers to make their operation as
difficult as possible. Their closure follows an earlier decision to discontinue the popular
if
controversial SPEWS block list for similar reasons. Linford says that Spamhaus has been
under
constant "extremely heavy" DDoS attack since early July. He believes the attack against his
site
and others originates from Windows machines infected with the Sobig worm, controlled by
spammers over IRC networks. The Sobig worm is known to install Trojan code on infected PCs
turning them into "zombies" capable of relaying spam messages or attacking other machines.
"Sobig has created a network of tens of thousands of zombie machines that have left a DDoS
arsenal in the hands of spammers," Linford said.
Source: http://www.theregister.co.uk/content/56/33059.html