Report: Zeus Flips Kill Switch On More Than 100,000 PCs

[link to www.darkreading.com]

According to a report in Friday's Washington Post, the Zeus control server was witnessed issuing the kill command -- sometimes called the "nuclear option" -- effectively self-destructing the botnet and the PCs that helped create it. Despite the blue screen, the PCs' hard drives were not irrepairable, according to reports.

Experts agreed that many botnets have the ability to execute such a command, but they very seldom do because most live by the data and processing resources they get from their component zombie machines. Although botnets have been used to launch denial-of-service (DOS) attacks on servers or networks, there is little record of them being used to launch this sort of "blue screen" attack against their constituents.

It's possible that the botnet was attacked by a rival group, or that its operators wanted to shut down the network quickly and temporarily, experts say. Some experts even speculate that the kill command may have been triggered by mistake.

The Zeus network was hit with a number of DOS attacks following the triggering of the kill switch, and the botnet is now effectively inoperative, according to reports.