Dorkbot botnets disruption

CERT Polska reports on an international takedown and sinkholing operation against the long-running Dorkbot Windows botnet. Dorkbot steals credentials, disables security software, and acts as a dropper for other malware while propagating via Skype, social networks and USB; partners in the disruption included Microsoft, ESET and multiple law enforcement agencies, and estimates cite roughly 1 million global infections with relatively low impact in Poland. The report points users to removal tools and provides context on the infrastructure takeover and sinkholing activity.