ZeroAccess Botnet Resumes Click-Fraud Activity

Bibliographic record

Publisher

Sophos (Secureworks Counter Threat Unit research)

Published

January 28, 2015

Source type

Cybersecurity report

Research grade

Source grade T2

Language

English

Official record

Not an official publication

Address

https://www.sophos.com/en-us/blog/zeroaccess-botnet-resumes-click-fraud-activity-after-six-month-break

What it supports

ZeroAccess resurgence: CTU's observation that the peer-to-peer botnet reactivated on 15 January 2015 and resumed distributing click-fraud templates to systems already compromised before the December 2013 disruption

Dataset id

src_secureworks_ctu_zeroaccess_resumes_2015

Research notes

• Authored by the Counter Threat Unit Research Team, originally published by Dell SecureWorks; the research now sits on sophos.com following the Secureworks acquisition.
• The live Sophos page shows no dateline. published_on (2015-01-28) is taken from the Internet Archive capture of the original Secureworks URL, https://www.secureworks.com/blog/zeroaccess-botnet-resumes-click-fraud-activity-after-six-month-break, which prints 'January 28, 2015'.
• The on-page H1 is 'ZeroAccess Botnet Resumes Click-Fraud Activity'; the phrase 'After Six-Month Break' survives only in the URL slug and is not part of the headline.