cNotes ¸¡º÷ °ìÍ÷ ¥«¥Æ¥´¥ê

pharmacy·Ïbotnet

Published: 2009/01/06

¤³¤³¤Î¤È¤³¤í¤º¡¼¤Ã¤È·Ñ³Ū¤Ë³èȯ¤ÊCanadian Pharmacy botnet¤äWaledec Botnet¤Ê¤É¤Îbotnet¤Ç¤¹¤¬¡¢Ãæ¤Ç¤âCanadian Pharmacy¤ËÂåɽ¤µ¤ì¤ëPharmacy·Ï¤Îbotnet¤¬ÌÜΩ¤Á¤Þ¤¹¤¬¡¢¤³¤ì¤Ï¤¿¤À¤Î¹­¹ð¥µ¥¤¥È¤Ç¡¢¤½¤Î¾éĹÀ­³ÎÊݤΤ¿¤á¤Î»ÅÁȤߤËbotnet¤Î»ÅÁȤߢâfast-flux¤ò¼è¤êÆþ¤ì¤Æ¤¤¤ë¤À¤±¤¸¤ã¤Ê¤¤¤«¤È¤¤¤¦Ç§¼±¤¬¶¯¤«¤Ã¤¿¤Ç¤¹¤¬¡¢¤½¤ì¤é¤ÎÃæ¤Ë¤ä¤Ï¤ê¤È¤¤¤¦¤«Malware´¶À÷¤òÁÀ¤¦¤â¤Î¤â¤¢¤ê¤Þ¤¹¡£

injectionÈï³²¤ò¼õ¤±¤Æ¤¤¤ë¥µ¥¤¥È¾ðÊó¤òÄ´¤Ù¤Æ¤¤¤ë¤È¸«¤Ä¤±¤é¤ì¤ë¤â¤Î¤ÎÃæ¤Ë¡¢Ä¾ÀÜweb¥¢¥¯¥»¥¹·Àµ¡¤Ç¤Î´¶À÷¤òÁÀ¤¦¤â¤Î¤Ç¤Ï¤Ê¤¯¡¢spam¤ò¥È¥ê¥¬¡¼¤È¤¹¤ë´¶À÷¥·¡¼¥±¥ó¥¹¤ËÍøÍѤµ¤ì¤ë¥ê¥À¥¤¥ì¥¯¥È¥µ¥¤¥È¤¬Â¿¤¯´Þ¤Þ¤ì¤Þ¤¹¡£

¤¿¤È¤¨¤ÐºÇ¶á¤Ç¤Ï¤³¤ó¤Ê¤Î¡£

 ­¡Pharmacy·Ïspam¢«¥È¥ê¥¬¡¼
 ¢­
 ¢­ËÜʸ¤ÎURL¤ò¥¯¥ê¥Ã¥¯
 ¢­
 ­¢£è£ô£ô£ð¡§¡¿¡¿diettopseek.cn/in.cgi?cocacola¢«¥ê¥À¥¤¥ì¥¯¥¿
 ¢­
 ¢­javascript¤Ç¿·µ¬iframeÀ¸À®
 ¢­
 ­££è£ô£ô£ð¡§¡¿¡¿north-host.net/images/new/index.php¢«¥ê¥À¥¤¥ì¥¯¥¿
 ¢­
 ¢­iframe
 ¢­
 ­¤£è£ô£ô£ð¡§¡¿¡¿north-host.net//images/new/pdf.php¢«¥ê¥À¥¤¥ì¥¯¥¿
 ¢­
 ¢­iframe
 ¢­
 ­¥£è£ô£ô£ð¡§¡¿¡¿north-host.net//images/new/load.php¢«¤³¤ì¤¬¥Þ¥ë¥¦¥§¥¢¡£

¤Þ¤¡­£°Ê¹ß¤ÏƱ¤¸¥µ¥¤¥ÈÆâ¤Ê¤ó¤Ç¤¹¤¬¡¢¡¢¡¢

¤³¤ó¤Ê¥Þ¥ë¥¦¥§¥¢¢ÍVirusTotal¤Î·ë²Ì

º£¸½ºß¥Õ¥¡¥¤¥ë¤Ï¸ºß¤·¤Þ¤»¤ó¡£

¤³¤¦¤¤¤Ã¤¿botnet¤Ïspam¥á¡¼¥ë¤À¤±¤¬¥È¥ê¥¬¡¼¤Ç¤Ï¤Ê¤¯¡¢bbs¤äblog¥³¥á¥ó¥È¤Ê¤É¤Î½ñ¤­¹þ¤ß¤ÇͶƳ¤¹¤ë¤³¤È¤âÂ硹Ū¤Ë¹Ô¤ï¤ì¤Æ¤¤¤Þ¤¹¡£¤Ò¤Ã¤¯¤ë¤á¤Æspam¥È¥ê¥¬¡¼¡£

¤Þ¤¿¥È¥ê¥¬¡¼¤Ë¤è¤Ã¤ÆÈô¤Ð¤µ¤ì¤ë¥µ¥¤¥È¤Ïiframe¤òÉÔÀµ¤ËÃíÆþ¤µ¤ì¤¿¥µ¥¤¥È¤Ç¤¹¤¬¤¿¤À¤Î¥ê¥À¥¤¥ì¥¯¥¿¤Ç¤¹¡£Ã±¤Ê¤ë¹­¹ð¥µ¥¤¥È¤ËÈô¤Ð¤¹»ÅÁȤߤˤâƱ¤¸»ÅÁȤߤ¬ÍѤ¤¤é¤ì¤Þ¤¹¡£

¤È¤¤¤¦¤ï¤±¤ÇÆü¡¹¿ôËü¤Îspam¥È¥ê¥¬¡¼¤Î¿·µ¬URL¤ò¥ê¥¹¥È¥¢¥Ã¥×¤·¤Æ¤ë¤Î¤Ç¤¹¤¬¡¢¤¿¤À¤Î¹­¹ð¤À¤«¤é¥¹¥ë¡¼¤È¤¤¤¦¤³¤È¤Ï¤ä¤Ã¤Æ¤Ï¤¤¤±¤Ê¤¤¤È¤¤¤¦¤ï¤±¤Ç¤¹¡£¤É¤ó¤Ê¤Ë³ÎΨ¤¬Ä㤯¤Æ¤â¤Á¤ã¤ó¤È¥Þ¥ë¥¦¥§¥¢²òÀϤ·¤Ê¤¤¤È¡£

[¥«¥Æ¥´¥ê:botnet´Ñ»¡Æüµ­]

by jyake

¡¡