Authorities disrupt Sality botnet infrastructure in joint action

International law-enforcement agencies and private partners seized Sality-linked domains and used a peer-to-peer sinkhole operation to disrupt the Sality botnet, according to BleepingComputer. The operation isolated infected machines by sinkholing known super peers, blocking payload transfers and download instructions. The DOJ, FBI and DCIS seized U.S. domains, while authorities in Bulgaria, Hungary and Romania seized additional domains. CrowdStrike said the operation left the botnet no longer under its operator's control, although infected machines still require remediation.