Malware
malware:sobig
Also: Sobig.A, Sobig.B, Sobig.C, Sobig.D, Sobig.F
Large email-spreading malware family whose Sobig.F variant used encrypted code and command-and-control servers.
Large email-spreading malware family whose Sobig.F variant used encrypted code and command-and-control servers.
“the botnet called Sobig”
“Sobig.F had this encrypted code in it”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | Command and control | Explicit | 74 |
Sobig USES Command and control
Sobig.F infected computers contacted command-and-control servers controlled by the malware author for instructions.
Explicit Confidence 99% · Mikko Hyppönen EP 74 Details
“every single infected computer would contact ten different servers. These would be command and control servers controlled by the malware author.”