Alliance Occur Between Rock Phish & Asprox

Notorious Rock Phish gang seems to have joined its operations with a nefariously treacherous bot network in efforts to potentially expand and disseminate its phishing attacks with greater hostility, notes RSA.

Researchers at FraudAction Research Lab of RSA said that the gang is replacing its homegrown bot network with the relatively more advanced fast-flux Asprox, a well-known botnet that propagates itself through SQL injection attacks against lawful Websites. Fast-flux allows bot-infected systems to serve as hosts/proxies for malevolent Websites and rotating regularly by changing their DNS that helps to escape detection. Meanwhile, as IP blacklists are primarily useless in spotting fast flux-based bot networks, th...

» SPAMfighter News - 16-09-2008