Beware of GhostNets

Many government agencies around the world were attacked by unknown botnets (network of computers used to carry out automated tasks such as spamming) for spying purposes, they were termed GhostNets, as the botnets could not be detected.

Once GhostNets infect the system, it becomes a zombie machine that could be controlled by a master computer called the command and control server. From the command and control server, cybercriminals can manage their botnets and instruct the army of zombie computers to work on their behalf.

Analysts say that these programmes are not system heavy or resource intensive and become active only when a certain piece of information is there on the system. So, even if you delete the mail after opening it or installing a required plug-in, the bots get installed.

It has been noticed that few hackers organisations are actively involved in the development and dissemination of toolset used to create the back door used in GhostNet. This threat, names Backdoor. GhostNet can easily be created by just about anyone who can use the toolset, which is built to be very easy to use.

So, how can users safeguard themselves from a threat that can't be detected?

“Users need to know that this is likely any other cyber crime and is there to stay. It might change form of mutate in future. They keep their anti-malware software updated irrespective of whether it can detect GhostNets or not. Besides, they can use technologies like reputation services to block access to the source of the malware. Also, never install plug-ins without knowing the URLs”.