Microsoft leads disruption of largest infected global PC network

SAN FRANCISCO Fri Dec 6, 2013 10:06am IST

The Microsoft logo is seen at their offices in Bucharest March 20, 2013. REUTERS/Bogdan Cristel/Files

The Microsoft logo is seen at their offices in Bucharest March 20, 2013.

Credit: Reuters/Bogdan Cristel/Files

Related Topics

Stocks

   

SAN FRANCISCO (Reuters) - Microsoft Corp(MSFT.O) said on Thursday it had disrupted the largest network of compromised personal computers, involving some 2 million machines around the world, since it stepped up its battle against organized online criminals three years ago.

The Redmond, Wash.-based software giant filed a lawsuit in Texas and won a judge's order directing Internet service providers to block all traffic to 18 Internet addresses that were used to direct fraudulent activity to the infected machines.

Law enforcement in many European countries served warrants at the same time, seizing servers expected to contain more evidence about the leaders of the ZeroAccess crime ring, which was devoted to "click fraud."

Such rings use networks of captive machines, known as botnets, in complicated schemes that force them to click on ads without the computer owners' knowledge. The schemes cheat advertisers on search engines including Microsoft's Bing by making them pay for interactions that have no chance of leading to a sale. Microsoft said the botnet had been costing advertisers on Bing, Google Inc (GOOG.O) and Yahoo Inc (YHOO.O) an estimated $2.7 million monthly.

The coordinated effort marks the eighth time Microsoft has moved against a botnet and a rare instance of it doing serious damage to one that is controlled with a peer-to-peer mechanism, where infected machines give each other instructions instead of relying on a central server that defenders can hunt down and disable.

But the ZeroAccess botnet still had a weakness: The code in the infected machines told them to reach out to one of the 18 numeric Internet addresses for details on which ads to click.

Microsoft recently opened a new Cybercrime Center in Redmond and is using new tools in its efforts. They are helped by a provision in trademark that allows pretrial seizure of suspected counterfeit goods, including websites that, as in the present case, are spreading tainted versions of the Internet Explorer browser.

The company is working with national computer security authorities in various countries and with Internet service providers to notify individual computer owners with infected machines, hoping to reach most of them before the fraudsters can spread new instructions.

Microsoft has been sharing evidence with the FBI and Europol, the continent's law enforcement coordinating service. National agencies took part in seizure actions in Germany, Switzerland, Latvia, Luxembourg, and the Netherlands.

For now, at least, the fraud by this network has stopped, said Microsoft Assistant General Counsel Richard Boscovich.

The operators of the botnet are believed to be in Russia, while the author of the malicious software distributed on it could be based elsewhere, Boscovich said.

(Reporting by Joseph Menn; Editing by Ken Wills)

FILED UNDER:
Comments (0)
This discussion is now closed. We welcome comments on our articles for a limited period after their publication.

  • Most Popular
  • Most Shared

REUTERS SHOWCASE

Literary Giant Dies

Literary Giant Dies

Nobel winner Garcia Marquez, master of magical realism, dies at 87.  Read 

Election 2014

Election 2014

India holds biggest day of voting with BJP gaining strength  Full Article | Full Coverage 

Insider Trading

Insider Trading

Ex-Goldman director Gupta starts prison term on June 17.  Full Article 

Market Eye

Market Eye

Sensex jumps 351 points, snaps 3-day losing streak  Full Article 

Expansion Plans

Expansion Plans

Reliance Industries, HPCL Mittal plan refinery expansions.  Full Article 

S&P on India

S&P on India

S&P: India's ratings to depend on next govt econ, fiscal policies.  Full Article 

Ambitious Aim

Ambitious Aim

In green car race, Toyota adds muscle with fuel-cell launch.  Full Article 

Deal Talk

Deal Talk

Piramal to buy 20 percent stake in Shriram Capital for $334 million.  Full Article 

Bond Market

Bond Market

A star abroad, RBI boss riles bond traders at home  Full Article 

Reuters India Mobile

Reuters India Mobile

Get the latest news on the go. Visit Reuters India on your mobile device.  Full Coverage