Malware

Waledac

malware:waledac

Peer-to-peer, layered spam botnet associated with Severa and targeted by Microsoft’s Operation b49.

Explore relationships

Mentioned in

Relationships

Direction Predicate Other entity Origin EP
outgoing DEVELOPED_BY Severa Explicit 110
outgoing USES SMTP Explicit 110
outgoing DISCOVERED_BY Joan Calvet Explicit 110
outgoing DISCOVERED_BY Carlton Davis Explicit 110
outgoing DISCOVERED_BY Pierre-Marc Bureau Explicit 110
incoming INVOLVES Operation b49 Explicit 110

Claims

Waledac DEVELOPED_BY Severa

Jack identifies Severa as the person who started the Waledac botnet.

Explicit Confidence 99% · Jack Rhysider EP 110 Details

“The Waledac botnet was started by a guy named Severa.”

Jack Rhysider · offsets 35394–35447

Waledac USES SMTP

Waledac contained an SMTP engine capable of communicating with an SMTP server and sending email.

Explicit Confidence 99% · Jack Rhysider EP 110 Details

“In the core binaries of the malware was an SMTP engine which could communicate with an SMTP server and send e-mails.”

Jack Rhysider · offsets 36375–36491

Waledac DISCOVERED_BY Joan Calvet

Joan Calvet was among the researchers who obtained Waledac binaries and reverse-engineered them.

Explicit Confidence 97% · Jack Rhysider EP 110 Details

“Joan Calvet and Carlton Davis, and Pierre-Marc Bureau who was from US internet security company ESET, well, they got ahold of these binaries from Waledac and started reverse-engineering them.”

Jack Rhysider · offsets 37239–37430

Waledac DISCOVERED_BY Carlton Davis

Carlton Davis was among the researchers who obtained Waledac binaries and reverse-engineered them.

Explicit Confidence 97% · Jack Rhysider EP 110 Details

“Joan Calvet and Carlton Davis, and Pierre-Marc Bureau who was from US internet security company ESET, well, they got ahold of these binaries from Waledac and started reverse-engineering them.”

Jack Rhysider · offsets 37239–37430

Waledac DISCOVERED_BY Pierre-Marc Bureau

Pierre-Marc Bureau was among the researchers who obtained Waledac binaries and reverse-engineered them.

Explicit Confidence 97% · Jack Rhysider EP 110 Details

“Joan Calvet and Carlton Davis, and Pierre-Marc Bureau who was from US internet security company ESET, well, they got ahold of these binaries from Waledac and started reverse-engineering them.”

Jack Rhysider · offsets 37239–37430

Operation b49 INVOLVES Waledac

Operation b49 was the coordinated effort to take down the Waledac botnet.

Explicit Confidence 99% · Jack Rhysider EP 110 Details

“Together, they would try to take down this Waledac botnet, and they codenamed this Operation b49.”