10,352 active botnets (was Re: register.com down sev0?)

Jose's numbers are conservative.

Given some mathematical acrobatics, I'd suggest examining some
of the (shocking) number sin Microsoft's Security Intelligence
Report (Google it) -- these are reflective:

"Of the 4 million computers cleaned by the company's MSRT
(malicious software removal tool), about 50 percent (2 million)
contained at least one backdoor Trojan. While this is a high
percentage, Microsoft notes that this is a decrease from the
second half of 2005. During that period, the MSRT data showed
that 68 percent of machines cleaned by the tool contained a
backdoor Trojan."

Ref: http://www.eweek.com/article2/0,1759,2036439,00.asp

If you're wondering why DDoS attacks are so effective, look
no further than your backyard.

- ferg

Jose may be a bit conservative with numbers, but he has good data and
shares it, which is more than I can say for some people.

Jose is definitely someone who knows what he is talking about when it
comes to botnets.

These numbers are not really relevant in my opinion, but they help get the
message across.

  Gadi.

Dear Fergie;

Is there a similar statistic available for Mac OS X ?

Regards
Marshall

Is there a similar statistic available for Mac OS X ?

Now now.

> "Of the 4 million computers cleaned by the company's MSRT
> (malicious software removal tool), about 50 percent (2 million)
> contained at least one backdoor Trojan. While this is a high
> percentage, Microsoft notes that this is a decrease from the
> second half of 2005. During that period, the MSRT data showed
> that 68 percent of machines cleaned by the tool contained a
> backdoor Trojan."

A lot depends on the definition.

I've removed some malware trying to exploit an old Microsoft JRE bug. This
stuff gets everywhere (well anywhere IE goes).

These get downloaded to some cached program folder for Java, and because the
exploit hasn't worked for years, sit there till some antivirus software comes
along and removes them, doing nowt but consuming disk space.

If you are the Microsoft malicious software removal tool marketing department,
that is a trojan removed. To the average person on the street, it is another
bit of meaningless fluff their PC will lose when they reinstall.

So yes, Microsoft is big enough to have bits who have a vested interest in
making the other bits look bad (if only incidentally). Thus is the way of big
companies.

http://www.asu.edu/security/aware/2005/lippard.htm