The command and control servers behind the ‘Red October’ espionage network started shutting down only hours after the campaign was exposed by Kapersky Lab last week.

The Red October malware campaign targeted governments, embassies and scientific organizations around the world. According to researchers at Kapersky Lab, the spy network had been gathering data and intelligence from mobile devices, computer systems and network equipment for the last five years.

The malware, and the complex network design behind it, is rumored to rival the infrastructure of the Flame virus.  The Red October malware contains 1,000 separate modules in 30 categories, allowing an attacker the ability to serve unique combinations of payloads to their targets based on the victim’s specific computer configuration and profile.

In an interview with Costin Raiu, of the Kaspersky Lab GReAT Team,  Raiu said “since Monday, when the first report of the campaign came out, hosting providers and domain owners have been shutting down servers used to help run the campaign”.

'It’s clear that the infrastructure is being shut down. This time it’s being shut down for good,' Raiu said. 'It’s not only the registrars killing the domains, and the hosting providers killing the command-and-control servers, but perhaps the attackers shutting down the whole operation.'

Continue reading at:  http://www.activistpost.com/2013/01/red-october-spy-network-goes-da...