The underground economy of spam: A Botmaster’s perspective of coordinating large-scale spam campaigns

LEET 2011 - 4th USENIX Workshop on Large-Scale Exploits and Emergent Threats: Botnets, spyware, Worms, and More

Volumn , Issue , 2011, Pages

  Stone Gross, Brett ^a,c   Holz, Thorsten ^b,c   Stringhini, Gianluca ^a   Vigna, Giovanni ^a,c  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b RUHR UNIVERSITY BOCHUM   (Germany)

^c Lastline   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER VIRUSES; CRIME; ELECTRONIC MAIL; QUALITY CONTROL; RELIABILITY ANALYSIS;

BOTMASTER; BOTNETS; COMMAND AND CONTROL; COMPREHENSIVE ANALYSIS; DELIVERY MECHANISM; E-MAIL ADDRESS;

BOTNET;

EID: 85084095302     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (23)

1. U. Bayer, I. Habibi, D. Balzarotti, E. Kirda, and C. Kruegel. A View on Current Malware Behaviors. In USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET), 2009.
2. J. Caballero, P. Poosankam, C. Kreibich, and D. Song. Dispatcher: Enabling Active Botnet Infiltration Using Automatic Protocol Reverse-engineering. In ACM Conference on Computer and Communications Security (CCS), 2009.
3. C. Cho, J. Caballero, C. Grier, V. Paxson, and D. Song. Insights from the Inside: A View of Botnet Management from Infiltration. In USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET), 2010.
4. A. Decker, D. Sancho, L. Kharouni, M. Goncharov, and R. McArdle. A Study of the Pushdo / Cutwail Botnet. http://us.trendmicro.com/imperia/md/content/us/pdf/threats/securitylibrary/ study_of_pushdo.pdf, 2009.
5. S. DiBenedetto, D. Massey, C. Papadopoulos, and P. J. Walsh. Analyzing the Aftermath of the McColo Shutdown. In Annual International Symposium on Applications and the Internet, 2009.
6. International Secure Systems Lab. Anubis: Analyzing Unknown Binaries. http://anubis.iseclab.org, 2010.
7. J. P. John, A. Moshchuk, S. D. Gribble, and A. Krishnamurthy. Studying Spamming Botnets Using Botlab. In USENIX Symposium on Networked Systems Design and Implementation, 2009.
8. C. Kanich, C. Kreibich, K. Levchenko, B. Enright, G. Voelker, V. Paxson, and S. Savage. Spamalytics: An Empirical Analysis of Spam Marketing Conversion. In ACM Conference on Computer and Communications Security (CCS), 2008.
9. B. Krebs. FTC Sues, Shuts Down N. Calif. Web Hosting Firm. http://voices.washingtonpost.com/securityfix/2009/06/ftc_sues_shuts_down_n_ calif_we.html, 2009.
10. B. Krebs. Spam Affiliate Program Spamit.com to Close. http://krebsonsecurity.com/2010/09/spam-affialite-program-spamit-com-to-close/, 2010.
11. C. Kreibich, C. Kanich, K. Levchenko, B. Enright, G. M. Voelker, V. Paxson, and S. Savage. Spamcraft: An Inside Look at Spam Campaign Orchestration. In USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET), 2009.
12. MessageLabs. MessageLabs Intelligence: 2010 Annual Security Report. http://www.messagelabs.com/mlireport/ MessageLabsIntelligence_2010_Annual_Report_ FINAL.pdf, 2010.
13. M. Motoyama, K. Levchenko, C. Kanich, D. Mccoy, G. M. Voelker, and S. Savage. Re:CAPTCHAs – Understanding CAPTCHA-Solving Services in an Economic Context. In USENIX Security Symposium, 2010.
14. A. Mushtaq. Infiltrating Pushdo – Part 1. http://blog.fireeye.com/research/2010/01/infiltrating-pushdo-part-1.html, 2010.
15. C. Nunnery, G. Sinclair, and B. B. Kang. Tumbling Down the Rabbit Hole: Exploring the Idiosyncrasies of Botmaster Systems in a Multi-Tier Botnet Infrastructure. In USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET), 2010.
16. A. Pitsillidis, K. Levchenko, C. Kreibich, C. Kanich, G. Voelker, V. Paxson, N. Weaver, and S. Savage. Botnet Judo: Fighting Spam with Itself. In Symposium on Network and Distributed System Security (NDSS), 2010.
17. G. Sinclair, C. Nunnery, and B. Kang. The Waledac Protocol: The How and Why. In Annual Conference on Malicious and Unwanted Software, 2010.
18. B. Stock, J. Gobel, M. Engelberth, F. Freiling, and T. Holz. Walowdac Analysis of a Peer-to-Peer Botnet. In European Conference on Computer Network Defense, 2009.
19. B. Stone-Gross, M. Cova, L. Cavallaro, R. Gilbert, M. Szydlowski, R. Kemmerer, C. Kruegel, and G. Vigna. Your Botnet is My Botnet: Analysis of a Botnet Takeover. In ACM Conference on Computer and Communications Security (CCS), 2009.
20. B. Stone-Gross, A. Moser, C. Kruegel, E. Kirda, and K. Almeroth. FIRE: FInding Rogue nEtworks. In Annual Computer Security Applications Conference (ACSAC), 2009.
21. M. Vicario. Cutwail Takedown Cripples Bredolab Trojan; No Effect on Spam Levels. http://www.symantec.com/connect/blogs/cutwail-takedown-cripples-bredolab-trojan-no-effect-spam-levels, 2010.
22. Y. Xie, F. Yu, K. Achan, R. Panigrahy, G. Hulten, and I. Osipkov. Spamming Botnets: Signatures and Characteristics. SIGCOMM Comput. Commun. Rev., 38, August 2008.
23. L. Zhuang, J. Dunagan, D. R. Simon, H. J. Wang, and J. D. Tygar. Characterizing Botnets From Email Spam Records. In USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET), 2008.