Rustock Botnet Changes Tactics

John E Dunn, Techworld.com

EmailPrintRSS0 Comments 0 Yes0 NoRecommends

The Rustock mega-botnet appears to have ditched the experimental use of TLS (transport layer security) to obscure its activity, Symantec has reported.

Rustock's use of TLS is now averages between 0.1 and 0.2 percent of all spam, peaking at 0.5 percent, a tiny fraction of the levels seen in March when it reached averages of around 25 percent with a peak of as much as 77 percent.