Botnet tracker timeline
Date Project Botnet 1
> 35,000 IPs
Botnet 2
> 300 IPs
Botnet 3
~250 IPs
Late June Creative news headlines
(no analysis yet)
July 6 at latest Porntube landing pages
video.exe
July 14 Download video landing page
view.exe
July 15 watch.exe
July 21 Watch Free Movie
codecinst.exe
July 26 "Beijing Olympics cancelled"
I get interested in Javascript
July 28 JS hypnosis worsens
July 30 Datamining Despammed.com archives
Aug 1 Wholesale investigation of landing pages get_flash_update.exe
Aug 2 Misc. spam
Aug 4 CNN Top 10 Video
Aug 4
Aug 6 Faux-CNN landing page Internet Explorer 7 starts
Aug 7 CNN Alerts:My Custom Alert
Obfuscated CNN page
adobe_flash.exe
Aug 11 asvoo.org antivirus popup Internet Explorer 7 stops
Aug 13 msnbc.com - BREAKING NEWS:
Faux-MSNBC landing page
BBC News spam
Last news for [name] spam
Aug 17 BREAKING news
Watch Free Movie again
install.exe
CNN Top 10 Video again
Aug 18 Weekly top news
viewer.exe
installer.exe






Creative Commons License
This work is licensed under a Creative Commons Attribution-ShareAlike 3.0 Unported License.