Security researchers from Dell SonicWALL have identified an interesting spam bot that is currently spreading with the help of insecure WordPress websites.
According to researchers, the malware is aggressive and does not try to hide its presence on a network. The threat is said to be similar to Cutwail, and is distributed via drive-by downloads.
Once it infects a device, malware will facilitate the distribution of other threats.
Three scvhost.exe processes are created on the infected computer and are used for network communications. However, the spam bot's interest lies in controlling server communications, where a large amount of traffic is used to mask the most important information.
Additional technical details about the threat, identified by Dell SonicWALL as Wigon.PH_44, are available on the SonicWALL Security Center website.
