Your browser does not fully support modern features. Please upgrade for a smoother experience.
Submitted Successfully!
Thank you for your contribution! You can also upload a video entry or images related to this topic. For video creation, please contact our Academic Video Service.
Version Summary Created by Modification Content Size Created at Operation
1 handwiki Camila Xu -- 2891 2022-09-29 01:33:06

Video Upload Options

We provide professional Academic Video Service to translate complex research into visually appealing presentations. Would you like to try it?
Cite
If you have any further questions, please contact Encyclopedia Editorial Office.
HandWiki. Storm Botnet. Encyclopedia. Available online: https://encyclopedia.pub/entry/28904 (accessed on 21 September 2026).
HandWiki. Storm Botnet. Encyclopedia. Available at: https://encyclopedia.pub/entry/28904. Accessed September 21, 2026.
HandWiki. "Storm Botnet" Encyclopedia, https://encyclopedia.pub/entry/28904 (accessed September 21, 2026).
HandWiki. (2022, October 11). Storm Botnet. In Encyclopedia. https://encyclopedia.pub/entry/28904
HandWiki. "Storm Botnet." Encyclopedia. Web. 11 October, 2022.
Storm Botnet
Edit

The Storm botnet or Storm worm botnet (also known as Dorf botnet and Ecard malware) was a remotely controlled network of "zombie" computers (or "botnet") that had been linked by the Storm Worm, a Trojan horse spread through e-mail spam. At its height in September 2007, the Storm botnet was running on anywhere from 1 million to 50 million computer systems, and accounted for 8% of all malware on Microsoft Windows computers. It was first identified around January 2007, having been distributed by email with subjects such as "230 dead as storm batters Europe," giving it its well-known name. The botnet began to decline in late 2007, and by mid-2008 had been reduced to infecting about 85,000 computers, far less than it had infected a year earlier. As of December 2012, the original creators of Storm have not been found. The Storm botnet has displayed defensive behaviors that indicated that its controllers were actively protecting the botnet against attempts at tracking and disabling it, by specifically attacking the online operations of some security vendors and researchers who had attempted to investigate it. Security expert Joe Stewart revealed that in late 2007, the operators of the botnet began to further decentralize their operations, in possible plans to sell portions of the Storm botnet to other operators. It was reportedly powerful enough to force entire countries off the Internet, and was estimated to be capable of executing more instructions per second than some of the world's top supercomputers. The United States Federal Bureau of Investigation considered the botnet a major risk to increased bank fraud, identity theft, and other cybercrimes.

cybercrimes security supercomputers

References

  1. Spiess, Kevin (September 7, 2007). "Worm 'Storm' gathers strength". Neoseeker. http://www.neoseeker.com/news/story/7103/. 
  2. Brodkin, Jon (September 7, 2007). "Financially motivated malware thrives". http://www.infoworld.com/article/07/09/07/Financially-motivated-malware-thrives_1.html. 
  3. Null, Christopher (2007-10-22). "Devastating "Storm" Computer Worm Waiting in the Wings". Yahoo! News. https://tech.yahoo.com/blogs/null/54983/devastating-storm-computer-worm-waiting-in-the-wings. 
  4. Utter, David (July 13, 2007). "Storm Botnet Driving PDF Spam". http://www.securitypronews.com/news/securitynews/spn-45-20070713StormBotnetDrivingPDFSpam.html. 
  5. Cringely, Robert X. (October 17, 2007). "The Gathering Storm". InfoWorld. http://www.infoworld.com/d/windows/gathering-storm-393. 
  6. Holz, Thorsten (April 9, 2008). "Measurements and Mitigation of Peer-to-Peer-based Botnets: A Case Study on Storm Worm". Usenix. http://www.usenix.org/event/leet08/tech/full_papers/holz/holz_html/. 
  7. Singel, Ryan (2007-12-07). "Report: Cybercrime Stormed the Net in 2007". Wired News. https://www.wired.com/politics/security/news/2007/12/2007_security. 
  8. Larkin, Erik (2007-12-03). "The Internet's Public Enemy Number One". PC World. http://www.pcworld.com/article/138694/the_internets_public_enemy_number_one.html. 
  9. Gaudin, Sharon (September 6, 2007). "Storm Worm Botnet More Powerful Than Top Supercomputers". http://www.informationweek.com/news/showArticle.jhtml?articleID=201804528. 
  10. Gaudin, Sharon (September 4, 2007). "After Short Break, Storm Worm Fires Back Up With New Tricks". InformationWeek. http://www.informationweek.com/security/showArticle.jhtml?articleID=201803920. 
  11. Fisher, Dennis (2007-12-17). "Storm, Nugache lead dangerous new botnet barrage". Search Security. http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci1286808,00.html. 
  12. Leyden, John (September 14, 2007). "Storm Worm linked to spam surge". The Register. http://www.channelregister.co.uk/2007/09/14/storm_worm_analysis/. 
  13. Schneier, Bruce (October 4, 2007). "Gathering 'Storm' Superworm Poses Grave Threat to PC Nets". Wired News. https://www.wired.com/politics/security/commentary/securitymatters/2007/10/securitymatters_1004. 
  14. Gaudin, Sharon (October 3, 2007). "Hackers Breaking Up Botnets To Elude Detection". InformationWeek. http://www.informationweek.com/news/showArticle.jhtml?articleID=202200755. 
  15. Sorensen, Chris (October 15, 2007). "Storm Worm the 'syphilis' of computers". The Star. https://www.thestar.com/Business/article/266834. 
  16. Utter, David (October 16, 2007). "Storm Botnets Using Encrypted Traffic". Security Pro News. http://www.securitypronews.com/insiderreports/insider/spn-49-20071016StormBotnetsUsingEncryptedTraffic.html. 
  17. "Storm DDoS hits anti-scam sites". Virus Bulletin.com. September 10, 2007. http://www.virusbtn.com/news/2007/09_10.xml. 
  18. Gaudin, Sharon (September 10, 2007). "NFL Kickoff Weekend Brings Another Storm Worm Attack". InformationWeek. http://www.informationweek.com/news/showArticle.jhtml?articleID=201805274. 
  19. Hernandez, Pedro (October 4, 2007). "Storm Worm Rewrote the Botnet and Spam Game". Enterprise IT Planet. http://www.enterpriseitplanet.com/security/features/article.php/3703431. 
  20. Stewart, Joe. "Storm Worm DDoS Attack". SecureWorks. https://www.secureworks.com/research/storm-worm. 
  21. McCloskey, Paul (September 14, 2007). "Storm Warning: Botnet Gearing Up To Attack Defenders". InformationWeek. http://www.informationweek.com/news/showArticle.jhtml?articleID=201800635. 
  22. Gaudin, Sharon (September 17, 2007). "Storm botnet puts up defenses and starts attacking back". InformationWeek. http://www.informationweek.com/news/showArticle.jhtml;jsessionid=GQWPETWS12JTQQSNDLPCKHSCJUNN2JVN?articleID=201800635. 
  23. "Storm Worm offers coal for Christmas". Security Focus. 2007-12-26. http://www.securityfocus.com/brief/649. 
  24. Wilson, Tim (2007-10-29). "Researchers Fear Reprisals From Storm". Dark Reading. http://www.darkreading.com/researchers-fear-reprisals-from-storm/d/d-id/1129091. 
  25. Lisa Vaas (2007-10-24). "Storm Worm Botnet Lobotomizing Anti-Virus Programs". eWeek. http://www.eweek.com/c/a/Security/Storm-Worm-Botnet-Lobotomizing-AntiVirus-Programs. 
  26. Paul, Ryan (September 12, 2007). "Spammers launch denial of service attacks against antispam sites". Ars Technica News. https://arstechnica.com/news.ars/post/20070912-spammers-launch-denial-of-service-attacks-against-antispam-sites.html. 
  27. Gaudin, Sharon (September 18, 2007). "Storm Worm Botnet Attacks Anti-Spam Firms". InformationWeek. http://www.informationweek.com/news/showArticle.jhtml?articleID=201807222. 
  28. Sophos Labs (2007-10-22). "Process-patching, the Dorf way". Naked security. https://nakedsecurity.sophos.com/2007/10/22/process-patching-the-dorf-way/. 
  29. Farrell, Nick (September 17, 2007). "Republicans infect voters with Storm Trojan". "The Inquirer". http://www.theinquirer.net/?article=42375. 
  30. Keizer, Gregg (September 14, 2007). "Hacked GOP Site Infects Visitors with Malware". Computerworld. http://www.pcworld.com/article/id,137226-c,hackers/article.html. 
  31. Tung, Liam (October 10, 2007). "'Storm worm' exploits YouTube". CNET News. http://www.news.com/Storm-worm-exploits-YouTube/2100-7349_3-6212674.html. 
  32. Keizer, Gregg (October 12, 2007). "Storm Trojan flaunts crazy cat to build out botnet". ComputerWorld. http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9042384&intsrc=news_ts_head. 
  33. Keizer, Gregg (2007-11-16). "Storm Botnet Spreading Malware Through GeoCities". PC World. http://www.pcworld.com/printable/article/id,139736/printable.html. 
  34. McMillan, Robert (2007-12-24). "Storm Worm Tempts With Christmas Strip Show". PC World. http://www.pcworld.com/article/id,140806-c,trojanhorses/article.html. 
  35. Hruska, Joel (2007-12-25). "Storm Worm delivering coal this Christmas". Ars Technica. https://arstechnica.com/news.ars/post/20071225-storm-worm-delivering-coal-this-christmas.html. 
  36. Keizer, Gregg (2007-12-26). "Storm Botnet Drops Strippers Lure, Switches to New Year's". PC World. https://www.pcworld.com/article/140827/storm_botnet_drops_strippers_lure_switches_to_new_years.html. 
  37. Rogers, Jack (2008-01-08). "Fortinet: Storm Worm botnet used to mount phishing attacks on Barclays, Halifax banks". SC Magazine. http://www.scmagazineus.com/Fortinet-Storm-Worm-botnet-used-to-mount-phishing-attacks-on-Barclays-Halifax-banks/article/100506/. 
  38. Stewart, Joe (October 15, 2007). "The Changing Storm". Secure Works. https://www.secureworks.com/blog/research-21011. 
  39. Francia, Ruben (October 16, 2007). "Researcher: Storm Worm botnet up for sale". Tech.Blorge. http://tech.blorge.com/Structure:%20/2007/10/15/researcher-storm-worm-botnet-up-for-sale/. 
  40. Espiner, Tom (2007-10-16). "Security expert: Storm botnet 'services' could be sold". CNet news. http://www.news.com/Security-expert-Storm-botnet-services-could-be-sold/2100-7349_3-6213781.html. 
  41. Vaas, Lisa (October 16, 2007). "Storm Botnet Kits Loom on the Horizon". EWeek. http://www.eweek.com/article2/0,1895,2199034,00.asp. 
  42. Goodin, Dan (October 15, 2007). "The balkanization of Storm Worm botnets". The Register. http://www.channelregister.co.uk/2007/10/15/storm_trojan_balkanization/. 
  43. Keizer, Gregg (October 18, 2007). "Spammers pump up volume with major spoken scam slam". Computerworld. http://computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=cybercrime_and_hacking&articleId=9043242&taxonomyId=82&intsrc=kc_top. 
  44. Prince, Brian (October 18, 2007). "MP3 Spam Scam Hits In-boxes". EWeek. http://www.eweek.com/article2/0,1895,2202129,00.asp. 
  45. Vamosi, Robert (January 9, 2008). "Phishers now leasing the Storm worm botnet". CNET News. http://www.news.com/8301-10789_3-9847276-57.html. 
  46. Beskerming, Sûnnet (September 25, 2007). "Guessing at compromised host number". The Register. https://www.theregister.co.uk/2007/09/25/microsoft_malicious_software_removal_tool/. 
  47. Naraine, Ryan (September 24, 2007). "Storm Worm botnet numbers, via Microsoft". ZDNet. http://blogs.zdnet.com/security/?p=533. 
  48. Krebs, Brian (October 1, 2007). "Just How Bad Is the Storm Worm?". The Washington Post. http://blog.washingtonpost.com/securityfix/2007/10/the_storm_worm_maelstrom_or_te.html?nav=rss_blog. 
  49. Chapman, Matt (2007-10-22). "Storm Worm may have blown itself out". VNUnet. http://www.vnunet.com/vnunet/news/2201721/storm-worm-blown-itself. 
  50. Francia, Ruben (2007-10-21). "Storm Worm network shrinks to about one-tenth of its former size". Tech.Blorge. http://tech.blorge.com/Structure:%20/2007/10/21/2483/. 
  51. McMillan, Robert (2007-10-21). "Storm Worm Now Just a Squall". PC World. http://www.pcworld.com/article/id,138721-c,virusesworms/article.html. 
  52. Vassou, Andrea-Marie (2007-11-29). "Cyber war to escalate in 2008". Computer Active. http://www.computeractive.co.uk/computeractive/news/2204685/cyber-spying-biggest-threat. 
  53. Messmer, Ellen (2007-12-11). "Attackers poised to exploit Olympics, presidential elections in 2008". Network World. http://www.networkworld.com/news/2007/121107-crystal-ball-security-threats.html. 
  54. "New botnet as powerful as Storm worm revealed". Secure Computing. 2007-11-29. http://www.securecomputing.net.au/news/66021,new-botnet-as-powerful-as-storm-worm-revealed.aspx. 
  55. Rogers, Jack (2007-12-26). "Cisco reports Storm botnet may be sublet to criminals in 2008 as holiday-themed attacks proliferate". SC Magazine. http://www.scmagazineus.com/Cisco-reports-Storm-botnet-may-be-sublet-to-criminals-in-2008-as-holiday-themed-attacks-proliferate/article/100154/. 
  56. Dunn, John E. (2008-01-07). "Nugache – the next Storm?". Tech World. http://www.techworld.com/security/blogs/index.cfm?blogid=1&entryid=760. 
  57. Utter, David (2008-01-04). "Storm Botnet Triples In Size". Security Pro News. http://www.securitypronews.com/insiderreports/insider/spn-49-20080104StormBotnetTriplesInSize.html. 
  58. "One fifth of all spam springs from Storm botnet". MessageLabs Intelligence: Q1 / March 2009 (MessageLabs). 2008-04-01. http://www.messagelabs.co.uk/mlireport/MLI_Report_March_Q1_2008.pdf. 
  59. Felix Leder (2010-04-28). "A Breeze of Storm". Honeynet Project Blog. https://www.honeynet.org/node/539. 
  60. Full Disclosure: Stormfucker http://seclists.org/fulldisclosure/2008/Dec/588
  61. Georg 'oxff' Wicherski, Tillmann Werner, Felix Leder, Mark Schlösser (2008). Stormfucker: Owning the Storm Botnet (Conference talk). Chaos Computer Club e.V. Archived from the original on October 6, 2009. Retrieved 2010-05-24. https://web.archive.org/web/20091006100315/http://media.ccc.de/browse/congress/2008/25c3-3000-en-stormfucker_owning_the_storm_botnet.html
  62. Dirro, Toralv (2010-04-28). "Dark and Stormy–Comeback of a Botnet?". McAfee Research Blog. http://blogs.mcafee.com/mcafee-labs/dark-and-stormy-comeback-of-a-botnet. 
More
Upload a video for this entry
Information
Subjects: Others
Contributor MDPI registered users' name will be linked to their SciProfiles pages. To register with us, please refer to https://encyclopedia.pub/register :
View Times: 4.5K
Entry Collection: HandWiki
Revision: 1 time (View History)
Update Date: 11 Oct 2022
Notice
You are not a member of the advisory board for this topic. If you want to update advisory board member profile, please contact office@encyclopedia.pub.
OK
Confirm
Only members of the Encyclopedia advisory board for this topic are allowed to note entries. Would you like to become an advisory board member of the Encyclopedia?
Yes
No
${ textCharacter }/${ maxCharacter }
Submit
Cancel
There is no comment~
${ textCharacter }/${ maxCharacter }
Submit
Cancel
${ selectedItem.replyTextCharacter }/${ selectedItem.replyMaxCharacter }
Submit
Cancel
Confirm
Are you sure to Delete?
Yes No
Academic Video Service