Korean DDoS Bots To Self-Destruct

July 10, 2009 · Print This Article

tsu doh nimh writes “Several news sources are reporting that the tens of thousands of Microsoft Windows systems infected with the Mydoom worm and being used in an ongoing denial of service attack against US and S. Korean government Web sites will likely have their hard drives wiped of documents come Friday. From The Washington Post’s safety measure Fix blog, the malware is ‘designed to download a payload from a set of Web

servers. Included in that payload is a Trojan horse program that overwrites the documents on the hard drive with a info that reads “memory of the independence day,” followed by as many “u” characters as it takes to write by every sector of every physical drive attached to the compromised system.’ ChannelNews Asia carries similar info.”