Botnet Tool Uses Twitter Direct Messages

Cyber criminals can control their botnet recently via Direct Messages on Twitter. The Python program Twittor called, was designed by the idea of GCAT, a similar program cyber criminals command & control servers to be managed via Gmail. Twittor made ​​by self-appointed security researcher Paul Amar and available from September, but is now observed by Sophos.

The tool uses direct messages on Twitter. The "advantage" of them, as compared to the conventional way of managing command & control servers, which the Direct Messages on Twitter are private. And the traffic is not stopped with IP filtering because Twittor use the Twitter API.

In addition, Twitter announced earlier this year that the limit of 140 characters is widened in private messages. This will therefore also more malicious traffic. The limitation is that there is a maximum of 1 000 direct messages per day can be sent.A botmaster can therefore no more than approximately 100 bots manage per account.

Many security tools such as Nmap and Metasploit, are not only useful for cyber criminals also useful for security researchers. Publishing a free tool that makes it possible to create a botnet via Twitter Direct Message operate seems an odd way of security research, says John Zorabedian Sophos.

Researcher: Most Mac Malware Is Hopelessly Behind

Most malware for Mac OS X is hopelessly behind compared to Windows malware, says researcher Patrick Wardle . "To draw a comparison, it is almost true Windows malware 10 to 15 years ago," so let him opposite Threat Post know. Most specimens Wardle encounter are individual files that are easy to find via the Activity Monitor.

The researcher is concerned about the Mac malware is unknown and unnoticed by the sluggishness of advanced testing tools. Where Windows has advanced and aggressive tools to detect malware, which are not for OS X, allowing sophisticated threats are missed possible. Therefore he will showcase at the upcoming Black Hat conference in Las Vegas how "elegant" Mac malware is making, which can evade anti-malware measures of OS X and third-party security tools.

So Wardle shows how Gatekeeper is remotely bypass to from unsigned code downloaded and run and how to get round all the popular virus scanners and firewalls are simple via malware. However, the investigator concludes with several free security tools that can detect or even prevent advanced Mac malware. "With these tools, we ensure that our computers are better protected against both current and future Mac malware."