The particularity of this botnet is that in order to acquire a control server address list, the bot agent uses the search service at. Once infected the victims, the malware sends a request to a remote site in order to acquire the list of control servers, and then connects to the C&C and waits for instructions.
Canada ranks second with 1,235 addresses (7%), and the United Kingdom ranks third with 1,227 IP addresses of infected computers (6.9% of the total). A statistical analysis indicates that there are more than 17,000 unique IP addresses associated with infected Macs.” states the official post published by Dr Web.Īccording data collected by experts at Dr Web on September 26th, 2014, the number of infected machines was 17,658, 4,610 (representing 26.1% of the total) reside in the United States. Criminals can issue commands that get this program to carry out a wide range of instructions on the infected machines. One of them turned out to be a complex multi-purpose backdoor that entered the virus database as Mac. “In September 2014, Doctor Web’s security experts researched several new threats to Mac OS X.
