Kraken InformationIn a press release publicly released by Damballa, Inc., on April 7, 2008 announcing the discovery of Kraken, the company mentioned that it would provide a subset of IPs compromised by the Kraken BotArmy. Since that information is now considerably out of date, we have deleted that link from our Web site. However, we continue to provide a suggested remediation technique for compromised IPs, available by clicking here. Damballa is providing this information to the public so that anyone affected by Kraken can take the appropriate steps to disable the compromise without having to engage a third party, and to provide the larger security research community an opportunity to take a deeper look into Kraken’s behavior. We feel that this public disclosure is the fastest, fairest means to help as many organizations as possible to protect themselves from this threat. This information in no way encourages nor allows additional compromise. Contact Damballa at kraken_info@damballa.com if you would like to find out more about Kraken. For other Kraken information, click on one of the following links: Kraken white paper (04/09/08) – requires registration Kraken discovery research notes (04/09/08) |
