When the botmasters get irritated with security folks, they tend to use their own creations to deliver their hate messages. With a series of takedowns affecting their command and control (C&C) infrastructures it is perhaps not surprising why they feel so annoyed.
A Pushdo bot we analysed earlier this week uses domain names which taunt FireEye and Brian Krebs.
Of course, the FireEye folks did a really great job in taking down the Mega-D and Pushdo C&C infrastractures. While Brian Krebs does a lot of excellent investigatory work highlighting cybercriminals.
Lately, we also noticed Zeus bot (Zbot) had some hidden messages in their binary.
It just goes to show, whenever the "bad guys" feel annoyed they find a creative way to express it.
