CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
Donations. Become Premium Today! Premium Icon
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 927
Comments: 25
block bottom
spacer spacer
image The Russian Business Network (RBN) image
Surveillance
David Bizeul published a 70 page analysis on the Russian Business Network (RBN) last week. For those who have heard about RBN and wanted to know more, then this is a great document to read and have on-hand. David plans to keep it updated. Follow the trail from CWS to phishing (Rock Phish), child pornography, and other malicious activities.

Download from David's site here. A mirror exists at SANS Internet Storm Center here.
Posted on Tuesday, 27 November 2007 @ 01:53:38 UTC by Paul (3433 reads)
[ Trackback ]		image

"The Russian Business Network (RBN)" | Login/Create an Account | 3 comments | Search
Threshold
The comments are owned by the poster. We aren't responsible for their content.

No Comments Allowed for Anonymous, please register

Re: The Russian Business Network (RBN) (Score: 1)
by PAN_IRISH  on Tuesday, 27 November 2007 @ 07:31:37 UTC
(User Info | Send a Message)
70 pages,Paul?

Is there a synopsis somewhere?




Re: The Russian Business Network (RBN) (Score: 1)
by MAPKOBKA  on Tuesday, 27 November 2007 @ 10:10:08 UTC
(User Info | Send a Message) http://malwarecrawler.com
Interesting paper, I am in the process of reading. However, I think it is slightly unfair to judge anti-virus apps with one sample, that is not detected by signatures.

Most people think they are protected against malware because they have
their miraculous antivirus but on this very issue, we can see people are still at risk and may encounter an identity theft at
any time.

The author seems to be disregarding the fact that most if not all have some kind of HIPS/behaviour blocker built in that would have caught and dealt with this trojan before it could do damage....


We all know that there is no security solution with a 100% detection rate, so judging their effectiveness in this way isn't really fair IMHO.


 
Login
spacer
Nickname

Password

Security Code: Type Security Code: Usage signifies AUP acceptance
· New User? · Click here to create a registered account.
block bottom
Related Links
spacer
· del.icio.us!
· digg it!
· reddit!
· TrackBack (0)
· HotScripts
· W3 Consortium
· More about Surveillance
· News by Paul

Most read story about Surveillance:
Fake spyware removal programs disabling PCs
block bottom
Article Rating
spacer
Average Score: 4.5
Votes: 2


Please take a second and vote for this article:

Bad
Regular
Good
Very Good
Excellent
block bottom
Options
spacer

Printer Friendly Page  Printer Friendly Page
block bottom
2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
Acceptable Use Policy. Use signifies your agreement.
210ppm 0.285s (0.013s)
Making cybercriminals unhappy since 2002*
In Memory of Trpm
spacer spacer