Jack says Cosma built the Rustock botnet.
Explicit Confidence 99% · Jack Rhysider EP 110 Details
“Cosma built a botnet called Rustock”
Malware
malware:rustock
Large spam botnet operated by Cosma, using layered command-and-control infrastructure and encryption.
Large spam botnet operated by Cosma, using layered command-and-control infrastructure and encryption.
“Cosma built a botnet called Rustock”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | DEVELOPED_BY | Cosma | Explicit | 110 |
| outgoing | ATTRIBUTED_TO | Cosma | Explicit | 110 |
| outgoing | USES | DNS | Explicit | 110 |
| incoming | INVOLVES | Operation b107 | Explicit | 110 |
Jack says Cosma built the Rustock botnet.
Explicit Confidence 99% · Jack Rhysider EP 110 Details
“Cosma built a botnet called Rustock”
Rustock used DNS for bots to connect to its command infrastructure.
Explicit Confidence 98% · Jack Rhysider EP 110 Details
“The botnet used DNS for the bots to connect to.”
Operation b107 INVOLVES Rustock
Operation b107 was the coordinated seizure and takedown of Rustock command-and-control servers.
Explicit Confidence 99% · Jack Rhysider EP 110 Details
“On March 16, 2011, Operation b107 was launched. Twenty-six individual Rustock C&C servers ... were seized”
Rustock is attributed directly to Cosma as its main botmaster.
Explicit Confidence 99% · Jack Rhysider EP 110 Details
“Cosma, Rustock’s main botmaster”