Incident Response, Malware, TDR

Group leveraging Cutwail spam botnet opts for “Magnitude” over BlackHole exploit kit

A group of saboteurs using the world's largest spam botnet, Cutwail, have opted to distribute their malware via the Magnitude exploit kit instead of through BlackHole.

Researchers on the Dell SecureWorks Counter Threat Unit (CTU) blogged on Friday about the move, which came soon after the arrest of Paunch, the author of the infamous BlackHole exploit kit.

The Cutwail botnet has often been used to deliver financial malware, such as the Zeus variant dubbed Gameover, researchers warned.

In one spam campaign, fraudsters tricked users into installing Gameover by sending spurious emails designed to look like browser updates from Microsoft. Instead, the Cutwail spam contained malicious links.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.