New Botnet Targets Zeus

A new botnet called Spy Eye has an interesting twist. Once installed it searches for traces of the Zeus Trojan, and if found, deletes it. Called “Kill Zeus”, the feature is meant to give Spy Eye exclusive control over the infected computer. It’s also capable of stealing data as it is transferred to Zeus’ command and control servers, drops a keylogger on to the system, steals and deletes cookies in IE and Firefox, and can update itself via email. Spy Eye works much like Zeus, targeting financial information and bank accounts. The FBI says Zeus is responsible for over $100 million in losses and damages.

Like Zeus, Spy Eye comes as a toolkit that allows anyone with $500 to set up their very own botnet. It may be the new kid on the block but it’s far from alone. Three other botnets, Filon, Clod, and Bugat, have also been recently discovered.