Phishing Sites Now Using the Storm Worm Botnet

Filed in archive Spam News on January 11, 2008

F-Secure is reporting that a number of phishing sites have appeared within the last 24hrs on domains associated with the Storm Worm. Experts speculate that the latest variations of the worm use security keys, which allow the botnet to be sectioned up for rent. In other words, phishers are renting parts of the botnet to do their dirty work. The latest phishing targets are several banks including the Royal Bank of Scotland. The domains being used are hosted on the Russian Business Network, a webhost notorious for turning a blind eye to the criminal activity being conducted on its servers. It has repeatedly refused to shut down the accounts of known spammers and cybercriminals using its services.