DorkBot is another modified IrcBot that is extremely similar to NgrBot, which is why many antivirus software treat them the same way, oftentimes using the same detection. Our botnet monitoring system has even captured NgrBot and DorkBot at almost the same time. However, according to a deeper analysis of both NgrBot and DorkBot, we find that they should be treated differently.
In this blog post, we will discuss the similarities and differences of these two botnets.
more here...........http://blog.fortinet.com/post/dorkbot-a-twin-botnet-of-ngrbot
In this blog post, we will discuss the similarities and differences of these two botnets.
more here...........http://blog.fortinet.com/post/dorkbot-a-twin-botnet-of-ngrbot