Ghost turns zombie: exploring the life cycle of web-based malware

摘要: While the web provides information and services that enrich our lives in many ways, it has also become primary vehicle for delivering malware. Once infected with web-based malware, an unsuspecting user's machine is converted into a productive member of Internet underground. In this work, we explore life cycle malware by employing light-weight responders to capture network profile machines. Our results indicate cornerstone large scale electronic fraud. It used exfiltrate address books compromised machines creating databases hundred millions email addresses, form spamming botnets responsible significant fraction spam currently seen on Internet, steal login credentials can be directly monetized or leveraged turn more servers delivery vectors. We support findings providing broad overview post-infection behavior as well in-depth examinations leaked found during course study.