FBI Pulls the Plug on Coreflood Botnet

14.04.2011
Coreflood is the . The FBI used bold, precedent-setting maneuvers to take the Coreflood botnet offline--reducing the volume of spam polluting the your Inbox, and making the Internet a little safer.

A (bots) that can be controlled remotely by attackers for a variety of malicious purposes. Coreflood allows compromised Windows PCs to be accessed by attackers, enabling them to steal sensitive personal and financial information in order to steal funds.

"Botnets and the cyber criminals who deploy them jeopardize the economic security of the United States and the dependability of the nation's information infrastructure," said Shawn Henry, Executive Assistant Director of the FBI's Criminal, Cyber, Response and Services Branch in the Department of Justice press release describing the effort to shut down Coreflood. "These actions to mitigate the threat posed by the Coreflood botnet are the first of their kind in the United States and reflect our commitment to being creative and proactive in making the Internet more secure."

Dave Marcus, research and communications director, explained that the cybercriminals behind Coreflood created a money machine with this botnet. Marcus says that it is difficult to estimate just how much money the botnet generated, but that it likely in the tens of millions, and that it is not outside the realm of possibility that Coreflood could have raked in more than $100 million.

This is just the latest in a string of high-profile botnet takedowns. was killed in February of 2010, Bredolab was shut down in November of last year, and --following a self-imposed hiatus over the holidays--was knocked offline in March of 2011. But, there are plenty more botnets where these came from.

In , Gunter Ollmann, Research VP for , is particularly impressed with the move by the FBI to obtain a temporary restraining order authorizing the government to respond to signals sent from PCs compromised by Coreflood to order the malicious agent to shut down.