Jack says hacker Google and Igor Vishnevsky built the Cutwail botnet.
Explicit Confidence 98% · Jack Rhysider EP 110 Details
“hacker Google and Igor Vishnevsky had built a botnet and called it Cutwail.”
Malware
malware:cutwail
Centralized spam botnet built by Google and Igor Vishnevsky and paired with the Pushdo Trojan.
Centralized spam botnet built by Google and Igor Vishnevsky and paired with the Pushdo Trojan.
“hacker Google and Igor Vishnevsky had built a botnet and called it Cutwail.”
Botnet used to spread malware and described as integrating with ZeuS.
“The Cutwail botnet, along with its friendly loader Pushdo”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | DEVELOPED_BY | Explicit | 110 | |
| outgoing | DEVELOPED_BY | Igor Vishnevsky | Explicit | 110 |
| outgoing | USES | Pushdo | Explicit | 110 |
| outgoing | USES | spam | Explicit | 110 |
| outgoing | USES | command and control server | Explicit | 110 |
| incoming | INVOLVES | McColo takedown | Explicit | 110 |
| incoming | USES | Gameover ZeuS Trojan | Explicit | 110 |
| incoming | USES | ZeuS | Explicit | 111 |
Jack says hacker Google and Igor Vishnevsky built the Cutwail botnet.
Explicit Confidence 98% · Jack Rhysider EP 110 Details
“hacker Google and Igor Vishnevsky had built a botnet and called it Cutwail.”
Cutwail DEVELOPED_BY Igor Vishnevsky
Igor Vishnevsky co-built Cutwail with hacker Google.
Explicit Confidence 98% · Jack Rhysider EP 110 Details
“hacker Google and Igor Vishnevsky had built a botnet and called it Cutwail.”
Cutwail was populated by Pushdo infections; the two malware families were described as working together.
Explicit Confidence 97% · Jack Rhysider EP 110 Details
“Google used a Trojan called Pushdo to infiltrate Windows computers and get the Cutwail spam engine running on them.”
Cutwail was designed and used to send large volumes of spam email.
Explicit Confidence 96% · Jack Rhysider EP 110 Details
“the one thing botnets are really good at is sending out mass volumes of spam e-mails”
Cutwail USES command and control server
Cutwail contacted command-and-control servers controlled by Google for instructions.
Explicit Confidence 99% · Jack Rhysider EP 110 Details
“Cutwail contacts hardcoded IP addresses to talk to the C&C server controlled by the hacker Google.”
McColo takedown INVOLVES Cutwail
Cutwail lost much of its hosting and became immobile after the McColo takedown.
Explicit Confidence 97% · Jack Rhysider EP 110 Details
“Google had most of his servers for Cutwail there. This was enough to make both botnets stunned and immobile”
Gameover ZeuS Trojan USES Cutwail
Jack says Gameover ZeuS was installed on millions of computers using the Cutwail botnet.
Explicit Confidence 96% · Jack Rhysider EP 110 Details
“It was installed on millions of computers using Pushdo and the Cutwail botnet.”
The transcript says ZeuS and Cutwail were integrated with each other, combining their capabilities.
Explicit Confidence 98% · Jack Rhysider EP 111 Details
“The Cutwail botnet, along with its friendly loader Pushdo, eventually integrated ZeuS into it, and ZeuS integrated Cutwail into it”