Confession's of a Bitcoin Botnet coder...

[bbit]

http://www.reddit.com/r/IAmA/comments/sq7cy/iama_a_malware_coder_and_botnet_operator_ama/

Living the American dream...

[1714898589]

1714898589

[paraipan]

http://www.reddit.com/r/IAmA/comments/sq7cy/iama_a_malware_coder_and_botnet_operator_ama/

Living the American dream...

thanks for sharing dude, still reading... 

[proudhon]

I'm tell you guys, this stuff is going to be the end of bitcoin.

[bbit]

http://www.reddit.com/r/IAmA/comments/sq7cy/iama_a_malware_coder_and_botnet_operator_ama/

Living the American dream...

thanks for sharing dude, still reading... 

Very welcome...It's absolutely amazing read...

[DeathAndTaxes]

LR is the most common one, most cybercriminals are too inexperienced to use bitcoin,

Now that is bad news for Bitcoin. 

[bbit]

I'm tell you guys, this stuff is going to be the end of bitcoin.

You might be right yikes! :/

[Sukrim]

Mining at BTCguild with ~ 10 GH/s since now about 2 months, continually growing - should be enough info to analyze BTCguild payouts (or ask eleutheria directly for logs, if he uses only 1 account, he's for sure in the top25, together with probably a few other botnets) and expose his adress(es), if he didn't use CoinControl. From there it's most likely off to MtGox or another exchange (they usually cooperate with law enforcement) or to a savings account that can be tracked.

Still an interesting read though!

[MoonShadow]

I'm tell you guys, this stuff is going to be the end of bitcoin.

Because some people on the Internet use it for crime?

Really?

[ineededausername]

Mining at BTCguild with ~ 10 GH/s since now about 2 months, continually growing - should be enough info to analyze BTCguild payouts (or ask eleutheria directly for logs, if he uses only 1 account, he's for sure in the top25, together with probably a few other botnets) and expose his adress(es), if he didn't use CoinControl. From there it's most likely off to MtGox or another exchange (they usually cooperate with law enforcement) or to a savings account that can be tracked.

Still an interesting read though!

+1, someone kick the botnet out

[Serith]

I'm tell you guys, this stuff is going to be the end of bitcoin.

You might be right yikes! :/

From Bitcoin network point of view a botnet is legitimate miner, as long as no one controls more that 50% of hashing power, everything is fine. And botnets doesn't affect bitcoin market price either because supply side always stays the same, 50 bitcoins per 10 minutes. Price per bitcoin changes only because demand changes, supply rate doesn't change and it doesn't matter who mined those coins. Of course legitimate miners can't compete with a botnet, but even that probably will change with ASIC mining, that will make CPU mining pointless even for a botnet.

[MysteryMiner]

I'm 50-50 if this story and screens are legit or fake. But many of the less-known facts and tips are legit.

Update: This guy is 100% legit! Moscow never sleeps.

[Steve]

I'm tell you guys, this stuff is going to be the end of bitcoin.

I think you have it backward…this stuff is going to be the end of the traditional banking system.  At least with Bitcoin you have a fighting chance of securing your assets.  With the traditional banking system, the theft just gets subsidized and no one cares or will care until entire companies (or nations that bail them out) start to collapse.  Unfortunately, by that time, it will be too late for that system.  I find it interesting that these criminals are using a superior (and ultimately less vulnerable) system like bitcoin to exploit an antiquated system that is rife with insecurities.

[evoorhees]

I'm tell you guys, this stuff is going to be the end of bitcoin.

Just as viruses were the end of the internet!

[ricksta]

can we tip the anti virus companies with advise on how to catch these background bitcoin mining processes so it's more difficult for botnets to operate as miners?

[check_status]

Something important for Windows users...Notice in the pics, W7, VS, XP. Every machine listed in the pics are Windows boxes. He also said he binds programs uploaded to usenet.

At the beginning it happened, my crypter got flagged and I had to rearrange the code to re"FUD" it. Now everything is automated, every victim gets a regular update, just for him. And because the polymorphism happens on my side, AV vendors can't get a detection for all modifications, it's game over for them.

I wonder if he has compromised any linux boxes?

[proudhon]

I'm tell you guys, this stuff is going to be the end of bitcoin.

Just as viruses were the end of the internet!

I don't know.  How many internets were stolen or freely mined and sold at whatever price the perpetrator could fetch at the time?

[MysteryMiner]

I find it interesting that these criminals are using a superior (and ultimately less vulnerable) system like bitcoin to exploit an antiquated system that is rife with insecurities.

It is so true!

[brunozisterer]

As long there is Gigamining and Bitbond don't worry.
They collected now in only 3 weeks more than 30000 BTC to run their miners.

[Gabi]

Something important for Windows users...Notice in the pics, W7, VS, XP. Every machine listed in the pics are Windows boxes. He also said he binds programs uploaded to usenet.

At the beginning it happened, my crypter got flagged and I had to rearrange the code to re"FUD" it. Now everything is automated, every victim gets a regular update, just for him. And because the polymorphism happens on my side, AV vendors can't get a detection for all modifications, it's game over for them.

I wonder if he has compromised any linux boxes?

Please avoid this Windows bullshit. Those are Windows boxes because noobs use Windows and not Linux. And, since they are noobs, they keep their computer NOT secure, unprotected and vulnerable to everything
The problem is the user, NOT the operative system.


A skilled person is safe with Windows or with Linux

[organofcorti]

I'm tell you guys, this stuff is going to be the end of bitcoin.

Just as viruses were the end of the internet!

I don't know.  How many internets were stolen or freely mined and sold at whatever price the perpetrator could fetch at the time?

This many:

[MysteryMiner]

A skilled person is safe with Windows or with Linux

Depends on the exploit. Yes, noobs click email attachments, download "codecs" from porn sites, etc. But it doesn't matter how good you are if somebody exploits a 0 day in chrome you are fucked. This is why Google pays people to disclose them.

Even for Windows 0-day exploits are becoming less damaging. Software does not run with administrative permissions. No system-wide damage, no rootkit installation possible. Some of vulnerabilities require special circumstances or already existing account on target computer.

The "codecs" are different kind of problem or "blessing" depending from context. When computers were expensive, only people who tried to master them used computers. Now everyone can afford a computer and they use it as entertainment device and don't want and can't use computers properly because of lack if IQ.

[check_status]

Please avoid this Windows bullshit. Those are Windows boxes because noobs use Windows and not Linux. And, since they are noobs, they keep their computer NOT secure, unprotected and vulnerable to everything
The problem is the user, NOT the operative system.


A skilled person is safe with Windows or with Linux

A Windows Security Experts advice to Noobs:

Noob:
What can I do to improve my Windows security?

WSE:
Install Windows ($150) latest updates ASAP.
Make sure you are running a good up to date Anti-Virus. ($59.99)
Make sure you have a good Firewall turned on. ($39.99)
Don't click on or install dumb shit. (Priceless)

A Linux Security Experts advice to Noobs:

Noob:
What can I do to improve my Linux security?

LSE:
Install your Linux (Priceless) distro's latest updates and fixes.
Don't click on or install dumb shit. (Priceless)

The cost of being secure on W?ndows? $250
The cost of being secure on Linux? Priceless  

[bulanula]

Please avoid this Windows bullshit. Those are Windows boxes because noobs use Windows and not Linux. And, since they are noobs, they keep their computer NOT secure, unprotected and vulnerable to everything
The problem is the user, NOT the operative system.


A skilled person is safe with Windows or with Linux

A Windows Security Experts advice to Noobs:

Noob:
What can I do to improve my Windows security?

WSE:
Install Windows ($150) latest updates ASAP.
Make sure you are running a good up to date Anti-Virus. ($59.99)
Make sure you have a good Firewall turned on. ($39.99)
Don't click on or install dumb shit. (Priceless)

A Linux Security Experts advice to Noobs:

Noob:
What can I do to improve my Linux security?

LSE:
Install your Linux (Priceless) distro's latest updates and fixes.
Don't click on or install dumb shit. (Priceless)

The cost of being secure on W?ndows? $250
The cost of being secure on Linux? Priceless  

For Windblow you have to pay the stupid tax

[MoonShadow]

Something important for Windows users...Notice in the pics, W7, VS, XP. Every machine listed in the pics are Windows boxes. He also said he binds programs uploaded to usenet.

At the beginning it happened, my crypter got flagged and I had to rearrange the code to re"FUD" it. Now everything is automated, every victim gets a regular update, just for him. And because the polymorphism happens on my side, AV vendors can't get a detection for all modifications, it's game over for them.

I wonder if he has compromised any linux boxes?

Please avoid this Windows bullshit. Those are Windows boxes because noobs use Windows and not Linux. And, since they are noobs, they keep their computer NOT secure, unprotected and vulnerable to everything
The problem is the user, NOT the operative system.


A skilled person is safe with Windows or with Linux

Skilled people don't use Windows exclusively, so it's a moot point.  Skilled people who use mutiple OS's know that GNU/Linux (and many other *nix class operating systems) is inherently more secure than Windows, even though Windows has improved significantly over the past decade.  Therefore, if some random person asks me what to do to improve their bitcoin security on windows, my default answer is still to use something else.

[Timo Y]

13-20 Ghash/s means his mining botnet earns him approx. $1.100-1.700 per month.

Now, I don't want to condone his actions, but putting myself in his skin, that seems hardly worth it to me. That's less than a cleaning lady earns where I live.  Why doesn't he just get a real job?  Why risk going to prison for such a modest amount of income?  

I assume that selling the CC information is a lot more lucrative than mining, and the mining is just a side project of his.

Either that, or his is doing this for reasons other than money. Prestige? Power?

He seems to think he is invincible, but even Tor is not 100% safe, and all it takes is a second of carelessness and your anonymity is blown, and your life is ruined.

[Sukrim]

As long there is Gigamining and Bitbond don't worry.
They collected now in only 3 weeks more than 30000 BTC to run their miners.

Volume does not mean income... I could sell a single share at 1 BTC and then it gets traded a million times --> volume is 1m BTC, but I still only got this single coin.

About the thread itself - just with the info he posted, as I said, it's not impossible to track his coins down at all for anyone. German speaker, miner at BTCguild (and no, I would NOT ban mining botnets by the way!) with a total of 10+ GH/s (possibly spread on several accounts), most likely has a higher-than-average stale rate, as he'd need to tunnel his getworks through his own proxy + TOR... do I need to go on?

What I find a bit disturbing is that even though he acts like a "total pro", in the end 1-2 years of reading coding tutorials online don't magically transform you in the god of programming. Likely he introduced a few security holes in his botnet software too.

[blablahblah]

can we tip the anti virus companies with advise on how to catch these background bitcoin mining processes so it's more difficult for botnets to operate as miners?

No no no... AV companies are like "reformed criminals" -- you never really know if they're 100% trustworthy.

1) They're self-proclaimed experts on viruses and other malware,
2) They like to install software on your computer which just happens to be a massive resource hog,
3) Their business model relies on a never-ending supply of viruses and customer fear.

If someone wants to be completely genuine about anti-virus software, why not ask for a government grant to kickstart a FOSS AV program that users are able to download and compile themselves? Then you can absolutely guarantee that your friendly anti-virus isn't burning up the idle time on your GPU.

[Raoul Duke]

If someone wants to be completely genuine about anti-virus software, why not ask for a government grant to kickstart a FOSS AV program that users are able to download and compile themselves? Then you can absolutely guarantee that your friendly anti-virus isn't burning up the idle time on your GPU.

http://www.clamav.net/lang/en/download/sources/ <-- not commenting on how good it is, but it's open source.

[kokojie]

Actually the botnet operator herself said windows is just as secure as macos or linux, it is just that botnets don't target linux because its tiny market share and the users are often knowledgeable about computers.

Please avoid this Windows bullshit. Those are Windows boxes because noobs use Windows and not Linux. And, since they are noobs, they keep their computer NOT secure, unprotected and vulnerable to everything
The problem is the user, NOT the operative system.


A skilled person is safe with Windows or with Linux

A Windows Security Experts advice to Noobs:

Noob:
What can I do to improve my Windows security?

WSE:
Install Windows ($150) latest updates ASAP.
Make sure you are running a good up to date Anti-Virus. ($59.99)
Make sure you have a good Firewall turned on. ($39.99)
Don't click on or install dumb shit. (Priceless)

A Linux Security Experts advice to Noobs:

Noob:
What can I do to improve my Linux security?

LSE:
Install your Linux (Priceless) distro's latest updates and fixes.
Don't click on or install dumb shit. (Priceless)

The cost of being secure on W?ndows? $250
The cost of being secure on Linux? Priceless  

[Sukrim]

If you get a Linux machine, it's likely a server. Probably quite often these are then used for FTP dumps and similar instead of being searched for credit card/Paypal/... information.

[rjk]

If someone wants to be completely genuine about anti-virus software, why not ask for a government grant to kickstart a FOSS AV program that users are able to download and compile themselves? Then you can absolutely guarantee that your friendly anti-virus isn't burning up the idle time on your GPU.

http://www.clamav.net/lang/en/download/sources/ <-- not commenting on how good it is, but it's open source.

I use that for all my mail servers. It's lightweight and fast.

[dizzy1]

Volume does not mean income... I could sell a single share at 1 BTC and then it gets traded a million times --> volume is 1m BTC, but I still only got this single coin.

About the thread itself - just with the info he posted, as I said, it's not impossible to track his coins down at all for anyone. German speaker, miner at BTCguild (and no, I would NOT ban mining botnets by the way!) with a total of 10+ GH/s (possibly spread on several accounts), most likely has a higher-than-average stale rate, as he'd need to tunnel his getworks through his own proxy + TOR... do I need to go on?

What I find a bit disturbing is that even though he acts like a "total pro", in the end 1-2 years of reading coding tutorials online don't magically transform you in the god of programming. Likely he introduced a few security holes in his botnet software too.

One of the pictures he linked to showed a modified version of https://github.com/cdhowie/Bitcoin-mining-proxy. He also said although he only says he has 10-20gh/s, he suspects that up to 30% of the current hashing power is from botnets.

[Raoul Duke]

If someone wants to be completely genuine about anti-virus software, why not ask for a government grant to kickstart a FOSS AV program that users are able to download and compile themselves? Then you can absolutely guarantee that your friendly anti-virus isn't burning up the idle time on your GPU.

http://www.clamav.net/lang/en/download/sources/ <-- not commenting on how good it is, but it's open source.

I use that for all my mail servers. It's lightweight and fast.

So do I. Just didn't want to start a discussion that AV's suck, and blah blah blah, hence the part about not commenting

[DeathAndTaxes]

A Windows Security Experts advice to Noobs:

Noob:
What can I do to improve my Windows security?

WSE:
Install Windows ($150 $0.00) latest updates ASAP.  (Already installed on that computer you just bought, service Packs have never cost anything)
Make sure you are running a good up to date Anti-Virus. ($59.99 $0.00)  (You said good not expensive right?  Avast = Free)
Make sure you have a good Firewall turned on. ($39.99 $0.00)  (Windows firewall is fine for 99% of users.  For power users there are free alternatives.)
Don't click on or install dumb shit. (Priceless)

FYPFY

I would add:
Install Windows Defender (there are better anti-malware products but I generally give WD to noobs because it just works).
use a router w/ NAT & SPI.  Only forward ports you need.

[DeathAndTaxes]

13-20 Ghash/s means his mining botnet earns him approx. $1.100-1.700 per month.

Now, I don't want to condone his actions, but putting myself in his skin, that seems hardly worth it to me. That's less than a cleaning lady earns where I live.  Why doesn't he just get a real job?  Why risk going to prison for such a modest amount of income?  

He indicated he is a student.  An $1800/mo part time job which is related to your major ain't that bad of a gig for a student.  As you indicated his total compensated is likely more when you include various other forms of revnue.  Would I personally do it?  No but I imagine a lot of other would if they had the ability.

[Fiyasko]

Well. Atleast people might realise "omg my gpu is at 100% overnight"
Or "hey my fans slow down when i use my computer"

But ofcourse they wont /facepalm
Most people dont do regular Dust Checks

[Sukrim]

It might even help the PCs living longer having their fans run nonstop so there is less dust buildup!

[Nyaaan]

13-20 Ghash/s means his mining botnet earns him approx. $1.100-1.700 per month.

Now, I don't want to condone his actions, but putting myself in his skin, that seems hardly worth it to me. That's less than a cleaning lady earns where I live.  Why doesn't he just get a real job?  Why risk going to prison for such a modest amount of income?  

I assume that selling the CC information is a lot more lucrative than mining, and the mining is just a side project of his.

Either that, or his is doing this for reasons other than money. Prestige? Power?

He seems to think he is invincible, but even Tor is not 100% safe, and all it takes is a second of carelessness and your anonymity is blown, and your life is ruined.

It's extra money, everyone loves extra money. Also, he considers it a 'challenge', and I agree that it is one.
It's called anonymity and being careful. Your life is only ruined if you dox yourself and reveal everything to FBI lul

It might even help the PCs living longer having their fans run nonstop so there is less dust buildup!

+1

I'm tell you guys, this stuff is going to be the end of bitcoin.

I think you have it backward…this stuff is going to be the end of the traditional banking system.  At least with Bitcoin you have a fighting chance of securing your assets.  With the traditional banking system, the theft just gets subsidized and no one cares or will care until entire companies (or nations that bail them out) start to collapse.  Unfortunately, by that time, it will be too late for that system.  I find it interesting that these criminals are using a superior (and ultimately less vulnerable) system like bitcoin to exploit an antiquated system that is rife with insecurities.

I have to agree with that.

I kinda want my own bitcoin botnet now. 

Send me a PM bro, I can work something out for you

Something important for Windows users...Notice in the pics, W7, VS, XP. Every machine listed in the pics are Windows boxes. He also said he binds programs uploaded to usenet.

At the beginning it happened, my crypter got flagged and I had to rearrange the code to re"FUD" it. Now everything is automated, every victim gets a regular update, just for him. And because the polymorphism happens on my side, AV vendors can't get a detection for all modifications, it's game over for them.

I wonder if he has compromised any linux boxes?

Zeus is not compatible with Linux, and most malware isn't either, because Windows is fail and idiots use Windows (double fail)

[Gabi]

Please avoid this Windows bullshit. Those are Windows boxes because noobs use Windows and not Linux. And, since they are noobs, they keep their computer NOT secure, unprotected and vulnerable to everything
The problem is the user, NOT the operative system.


A skilled person is safe with Windows or with Linux

A Windows Security Experts advice to Noobs:

Noob:
What can I do to improve my Windows security?

WSE:
Install Windows ($150) latest updates ASAP.
Make sure you are running a good up to date Anti-Virus. ($59.99)
Make sure you have a good Firewall turned on. ($39.99)
Don't click on or install dumb shit. (Priceless)

A Linux Security Experts advice to Noobs:

Noob:
What can I do to improve my Linux security?

LSE:
Install your Linux (Priceless) distro's latest updates and fixes.
Don't click on or install dumb shit. (Priceless)

The cost of being secure on W?ndows? $250
The cost of being secure on Linux? Priceless  

Please, i use Windows 7 with Avast antivirus (wich is free) and nothing more and i get no virus

Yes i have to pay for the OS but except that nothing more.

Also a noob will get infected even with an antivirus and a firewall, that's why he is a noob

[Dansker]

He sounds like quite the Prodigy judging from his replies.

I wonder how he is spending his bitcoins?

Also, won't you be able to detect botnets mining in pools due to a change in mining power equal to people turning on and off their infected computers?

[mb300sd]

MSDN ISO + SLP activation = ultimate for free with no malware risk..

I run no AV, just a monthly scan. All keygens and anything else I don't trust gets run in VMware, browsing in another VM as we speak. Only trusted software ever makes it to my main system.

[rjk]

MSDN ISO + SLP activation = ultimate for free with no malware risk..

I run no AV, just a monthly scan. All keygens and anything else I don't trust gets run in VMware, browsing in another VM as we speak. Only trusted software ever makes it to my main system.

+1 for SLP activation.

[MoonShadow]

Also, won't you be able to detect botnets mining in pools due to a change in mining power equal to people turning on and off their infected computers?

Doubtful, because any one person turning off or on an infected machine would have little effect upon the total hashrate.  It would be lost in the general noise.

[check_status]

Subscription Levels - MSDN Operating Systems - $699.00 ($499.00 Renewal)
https://msdn.microsoft.com/en-us/subscriptions/buy/buy.aspx

To get Win 7 Ultimate for free you need access to some organization that has paid for a subscription already.

I wonder how much Windows 7 Ultimate would cost in ⊅BTC?   

[Sukrim]

Subscription Levels - MSDN Operating Systems - $699.00 ($499.00 Renewal)
https://msdn.microsoft.com/en-us/subscriptions/buy/buy.aspx

To get Win 7 Ultimate for free you need access to some organization that has paid for a subscription already.

...or you need access to the hashes of said ISO files to check if your downloaded copy is the same as you would buy from Microsoft.

[Nyaaan]

Subscription Levels - MSDN Operating Systems - $699.00 ($499.00 Renewal)
https://msdn.microsoft.com/en-us/subscriptions/buy/buy.aspx

To get Win 7 Ultimate for free you need access to some organization that has paid for a subscription already.

I wonder how much Windows 7 Ultimate would cost in ⊅BTC?   

You can buy 'cheap legal' Microsoft keys from various people who own badly designed online stores, make occasional grammar mistakes and have good reputation on various technology forums.

Real computer users don't need antiviruses. AV is completely useless, and is easy to bypass if you have money or you can code.
Malware removal tools (malwarebytes etc.) will be more useful.

[bulanula]

I was once using Windows 2000 SP4 without any additional updates and no antivirus.

Nothing happens if you have an organ called "brain"

Using Linux all round now

Too bad you can't game on Linux or read VRM temps using GPU-Z

[MoonShadow]

I was once using Windows 2000 SP4 without any additional updates and no antivirus.

Nothing happens if you have an organ called "brain"

Using Linux all round now

Too bad you can't game on Linux or read VRM temps using GPU-Z

I play games on Linux all the time.

[ryu-fk]

It's extra money, everyone loves extra money. Also, he considers it a 'challenge', and I agree that it is one.
It's called anonymity and being careful. Your life is only ruined if you dox yourself and reveal everything to FBI lul

How is it a challenge? what he did takes no intellectual ability at all.
". Your life is only ruined if you dox yourself and reveal everything to FBI lul" What does that even mean, it's highly naive of him to think that he is untraceable.

Zeus is not compatible with Linux, and most malware isn't either, because Windows is fail and idiots use Windows (double fail)

Most malware isn't compatible with linux because the vast majority of users use windows. Creating a botnet with linux bots isn't harder than targeting windows machines but the turn over won't be as great. Also most desktop linux users are poor communists so it's not worth stealing their financial details.

Windows users are able to enjoy the largest selection of software, when I buy a new tv card I don't have to spend 10 hours compiling drivers and kernels, I simply pop a disk in and install. Who are the real idiots?

On another note if my machine was compromised I much rather it be used for bitcoin mining than key logging. That doesn't justify his actions though.

[Nyaaan]

It's extra money, everyone loves extra money. Also, he considers it a 'challenge', and I agree that it is one.
It's called anonymity and being careful. Your life is only ruined if you dox yourself and reveal everything to FBI lul

How is it a challenge? what he did takes no intellectual ability at all.
". Your life is only ruined if you dox yourself and reveal everything to FBI lul" What does that even mean, it's highly naive of him to think that he is untraceable.

Zeus is not compatible with Linux, and most malware isn't either, because Windows is fail and idiots use Windows (double fail)

Most malware isn't compatible with linux because the vast majority of users use windows. Creating a botnet with linux bots isn't harder than targeting windows machines but the turn over won't be as great. Also most desktop linux users are poor communists so it's not worth stealing their financial details.

Windows users are able to enjoy the largest selection of software, when I buy a new tv card I don't have to spend 10 hours compiling drivers and kernels, I simply pop a disk in and install. Who are the real idiots?

On another note if my machine was compromised I much rather it be used for bitcoin mining than key logging. That doesn't justify his actions though.

1. Go trace him down
2. Bitcoin mining does more hardware damage than keylogging.

[ryu-fk]

1. Go trace him down
2. Bitcoin mining does more hardware damage than keylogging.

It's not about hardware damage, I value my privacy more than my hardware and I definitely value my bank details more than I value my hardware.

[fatigue]

If anyone here seriously thinks that any AV out there will protect him from a determined/experienced spreader they have another thing coming. The people who spread these things pay a measly $40 - $60 for an always updated crypter to make any RAT(Remote Administration Tool) or BTC miner bypass their AV. Hell, the AV waves at said trojan and says thanks for coming.

Hell, people even make IRC bots that infect up to 20% of their traffic if they're good. You could simply visit a website and get infected. Its that simple. The people who do this stuff make a lot of money because they're generally really good at what they do.

Edit: moral of the story, dont go download everything you see, dont lurk around fishy parts of the internet.

[xurious]

No AV here, haven't used one in 8+ years. Last time I did, it didn't like the contents of my file server and never used one again.

Windows security is irrelevant, they are looking at market share. That's why osx was "secure" and is now trickling to becoming "unsecure."

Security by obscurity is delusion many people don't acknowledge.

I've downloaded literally 10's of terabytes of stuff of the internet. I've never lost my identity, never got hacked, never had toolbar problems.

A good nat router is simply amazing against penetration for the money and skill level needed to install. I used to browse in a VM. That become a pain. I just turned off all the potential problems (flash, java, active-x). Problem solved. Last time I checked... html doesn't ruin your day.

[bulanula]

No AV here, haven't used one in 8+ years. Last time I did, it didn't like the contents of my file server and never used one again.

Windows security is irrelevant, they are looking at market share. That's why osx was "secure" and is now trickling to becoming "unsecure."

Security by obscurity is delusion many people don't acknowledge.

I've downloaded literally 10's of terabytes of stuff of the internet. I've never lost my identity, never got hacked, never had toolbar problems.

A good nat router is simply amazing against penetration for the money and skill level needed to install. I used to browse in a VM. That become a pain. I just turned off all the potential problems (flash, java, active-x). Problem solved. Last time I checked... html doesn't ruin your day.

Well said. Same story here.

Nobody is out to get savvy users like me and you. No point being paranoid. Check out wilders security forums to see those guys using 10 bulletproof vests

They are out to get idiots who click on anything they see shiny

Nothing can protect those dumb users ...

[Raoul Duke]

Nothing can protect those dumb users ...

The only thing I can remember from my IT classes on highschool is this:
"There's no anti-virus against human stupidity!"

It served me well... so far...
Too bad I didn't learn anything else on those classes, but that statement remained lol

[Jessica]

If anyone here seriously thinks that any AV out there will protect him from a determined/experienced spreader they have another thing coming. The people who spread these things pay a measly $40 - $60 for an always updated crypter to make any RAT(Remote Administration Tool) or BTC miner bypass their AV. Hell, the AV waves at said trojan and says thanks for coming.

Hell, people even make IRC bots that infect up to 20% of their traffic if they're good. You could simply visit a website and get infected. Its that simple. The people who do this stuff make a lot of money because they're generally really good at what they do.

Edit: moral of the story, dont go download everything you see, dont lurk around fishy parts of the internet.

You mean exploit kits, not irc bots.

[Lethos]

I got to give him credit for what some of these botnet coders achieve (the programming side), doing this on the scale it's done is not easy and staying undetected of course even harder. He has released a bit too much information, frankly he's probably shot himself in the foot if any wanted to actually figure out who he was now.

However I do kinda hope they get caught out since this does damage the reputation of bitcoin by a negative association.
The masses still don't understand bitcoin, this is not helping.

[Luceo]

I'm tell you guys, this stuff is going to be the end of bitcoin.

Nah, ASIC corrects this issue pretty much. Botnets will be more profitable doing something else when they come along.

[DingoRabiit]

My gosh people, Stop with all the OS and AV talk.

Odds are that 95% of infected comps are owned by Fucking Idiots.

Any Fucking Idiot on any operation system can get infected, CAN

[firefop]

Zeus is not compatible with Linux, and most malware isn't either, because Windows is fail and idiots use Windows (double fail)

Most malware isn't compatible with linux because the vast majority of users use windows. Creating a botnet with linux bots isn't harder than targeting windows machines but the turn over won't be as great. Also most desktop linux users are poor communists so it's not worth stealing their financial details.

Exactly correct, the reason there isn't much malware development for osx or linux is because the market share just isn't large enough to make it profitable. I know because I do virus removals for my living. Average day I get ~10 pcs 2 macs... about once every 2 months I get a linux user who I get to laugh at and say "just nuke the box".

But I do have to say this, the vast majority of infections are detected by AV like norton, trend or kapersky. All of the potentially useful malware is well defined and nearly impossible to hide. Most of my business comes from people who were informed by AV that a virus was found and removed. Then it's a 20 or 30 min thing for me to remove the source (whatever trojan/dropper/rootkit) they've actually got. And that's if I have to manually track it down and kill it use AR/PE/HJT. in the vast majority of cases TK and MBAM catch everything.

Additionally, most AVs now monitor performance, and would alert the user if resources had high usage. Heck it took the AV community (and virus removal techs specifically) all of 2 days to identify Zero.Access, a week later it was defined, and a week after that we had a reliable removal process pushed out to every av source that matters.

TimeTillDeath on your average botnet (remote administration tool) is a few days or weeks at best. Assuming the user had an AV installed first.

[Malophor]

This isn't unexpected. Hey look, computers can print money (kind of) if only there were a way to take over LOTS of computers. Hummm. Oh yeah, a botnet. Geniuses that put that one together. It would be nice to see some diligence from the pools to find and arrest people that are breaking the law.

[organofcorti]

This isn't unexpected. Hey look, computers can print money (kind of) if only there were a way to take over LOTS of computers. Hummm. Oh yeah, a botnet. Geniuses that put that one together. It would be nice to see some diligence from the pools to find and arrest people that are breaking the law.

You're new to the internet, aincha?

[paraipan]

This isn't unexpected. Hey look, computers can print money (kind of) if only there were a way to take over LOTS of computers. Hummm. Oh yeah, a botnet. Geniuses that put that one together. It would be nice to see some diligence from the pools to find and arrest people that are breaking the law.

You're new to the internet, aincha?

[Malophor]

You must have missed the sarcasm and virtual eye roll.

[paraipan]

You must have missed the sarcasm and virtual eye roll.

Good one, next time use a smiley 

[AngryCatfish]

Interesting read, thanks for the post!

[organofcorti]

You must have missed the sarcasm and virtual eye roll.

Very subtle sarcasm? In a forum? New to the internet, aincha?

[darkice]

asics will destroy his operation , botnets wont be profitable any more

[Malophor]

asics will destroy his operation , botnets wont be profitable any more

I don't know about that. He had a relatively small botnet. Unfortunately, botnets are a thing that tends to scale well -- up to a point. Further, there is no margin cost for adding another bot to the network. Another user becoming infected and mining would all be automated. ASICS merely provide incentive for botnets to get bigger. Plus, the existing botnets at smaller sizes are going to become LESS profitable, but still profitable. Hashing power is still hashing power. So, there is still incentive to spend $5 for a 500 node botnet. Crime pays after all -- until you get caught.

[meebs]

I'm tell you guys, this stuff is going to be the end of bitcoin.

that is why people keep saying that ASIC's are a good thing for bitcoin in the end.. if each ASIC is worth the 10,000 CPU's then it'll be a lot easier to keep botnet network % down.

[hashman]

I'm tell you guys, this stuff is going to be the end of bitcoin.

that is why people keep saying that ASIC's are a good thing for bitcoin in the end.. if each ASIC is worth the 10,000 CPU's then it'll be a lot easier to keep botnet network % down.

I'd rather have botnets than ASICs validating my TXs.  Botnets are more in line with Satoshi's vision.