Today, I’m happy to announce that based on the knowledge gained in that effort, we have successfully taken down a larger, more notorious and complex botnet known as Rustock. This botnet is estimated to have approximately a million infected computers operating under its control and has been known to be capable of sending billions of spam mails every day, including fake Microsoft lottery scams and offers for fake – and potentially dangerous – prescription drugs.
http://blogs.technet.com/b/microsoft_on ... otnet.aspxThe Microsoft led initiative by the Microsoft Digital Crimes Unit is known as
Operation b107, formerly Operation b49 which had taken down the Waledac botnet.
I have read around and some claims say as much as 39% of spam has dropped in the last few days, although I am not sure its quite that high. The M86 Security Labs company
tracks spam botnets and according to them it looked like at one point The Rustock Botnet may have been responsible for about 60% of spam when it hit its peak last year, in 2010. Since it was shutdown a few days ago it looks like spam levels from the Rustock Botnet were closer to around 5% to 10%. That is still a great achievement, and it looks like they are starting to figure out how to go after these botnets and take them down.
You can learn more about how the Rustock Botnet works here:
http://www.m86security.com/labs/spambot ... rticle=902It is a sophisticated and prolific spamming machine, a leader in terms of spam output. The individual spambots are among the fastest at sending spam that we have observed. Rustock uses a rootkit to hide itself on its host, and changes its spam templates often. It focuses almost exclusively on male enlargement and other pharmaceutical drugs. Most variants of Rustock are not identified by antivirus programs as Rustock, but rather with generic names.
According to that article each infected machine can send 25,000 messages per hour, and estimates according to
Wikipidea that anywhere from 150,000 to 2,400,000 machines had been infected and part of the Ruststock Botnet network. Just doing the math you can see that is a great deal of spam!
This is another interesting page which shows how spam has dropped over the last year:
http://www.m86security.com/labs/spam_statistics.aspIndia tops the list as the country that sends out the most Spam, followed closely by Russia.