A Browser-Savvy Botnet Surfaces

AVG's Roger Thompson has released some interesting details regarding a fast-flux botnet that is serving up different exploits based on the type of browser it encounters. The fast-flux method, a favorite of the infamous Rock Phish group, is not new to the phishing scene. The technique was used by one of the Web's largest botnets, the Storm Worm. What is new, however, is the targeted approach that this latest attack utilizes.

Thompson, who credits a friend at the IRS as well as noted security researcher Nick FitzGerald with the discovery, explains that this botnet is smart enough to exploit vulnerabilities specific to your particular browser. If it detects that you are running Firefox, for example, it will push an exploit tailored toward that browser rather than just taking a shot in the dark. If successful, a rootkit with Russian origins is installed on the victim's machine. To avoid being affected by this new botnet, you should ensure that your browser is up-to-date with the latest patches and that you are running a suitable anti-virus software package.