26. Storm Worm, cont.

• Enables botnet of phishing web sites via a set of dynamic hosts:

• The website hops from server to server too quickly -- way before investigators can get to it.

• Zombie machines can automatically shift to DDoS attack mode

• Knocks rival botnet malware offline

• Undergoes regular updates to circumvent detection by antivirus