Categories: SecurityWorkspace

Andromeda Botnet Returns With Souped-Up Stealth Skills

A botnet named Andromeda has resurfaced and is trying to shove backdoors into machines across the world, a security firm has warned.

The threat itself arrives via spammed messages with malicious attachments, or links to compromised websites hosting Blackhole Exploit Kit. Variants of the Andromeda malware can be bought on the Internet underground for as much as $500.

Botnet comes back

But there are a number of plugins available for more money, which can do a variety of things, including keylogging and installing rootkits to hide the malicious software from security protections.

Australia, Turkey, and Germany are the top targeted countries, according to Trend Micro.

Thanks to the modular aspect of the Andromeda botnet, scanning technologies may struggle to pick up the threat. The malware even drops in a modular fashion, rather than in one lump file, making detection a little trickier.

“The perpetrators behind Andromeda have improved the malware’s propagation routines to proliferate itself by dropping several component files, one of which creates the registry key containing an encrypted .DLL file for its propagation,” Trend noted in a blog post.

“To some degree, these threats can be evaded by not opening links or attachments in suspicious emails, although with well-crafted emails this can be difficult.”

Andromeda was first spotted in late 2011, but was quiet throughout 2012. It’s likely the creators were improving their malicious software before relaunching in earnest.

Are you a security expert? Try our quiz!

Thomas Brewster

Tom Brewster is TechWeek Europe's Security Correspondent. He has also been named BT Information Security Journalist of the Year in 2012 and 2013.

Recent Posts

Google Jarvis AI Extension Leaked On Chrome Store

Seemingly accidental leak reveals Google is developing Jarvis AI extension that can browse the web…

1 day ago

Amazon Mulls New Multi-Billion Dollar Investment In Anthropic – Report

Amazon is reportedly in talks to pump billions of dollars more into AI start-up Anthropic,…

1 day ago

FTX’s Caroline Ellison Begins Her Two Year Prison Sentence

Star witness for the US prosecution of FTX founder Sam Bankman-Fried, has begun her two…

1 day ago

More Layoffs For iRobot Staff After Abandoned Amazon Deal

After axing 31 percent of its workforce when it failed to be acquired by Amazon,…

2 days ago

Mozilla Foundation Confirms Layoffs, Eliminates Advocacy Division

Mozilla Foundation axes 30 percent of its staff, and is eliminating its Advocacy Division that…

2 days ago

Google To Make MFA Mandatory Next Year

Improving security. Mandatory multi-factor authentication (MFA) is coming to the Google Cloud by the end…

2 days ago