Dutch authorities managed to take control over two servers of the spam botnet Grum. IT-specialists found out that the two servers were located in the Netherlands, one in Russia and one in Panama. After successful operation authorities blocked two secondary Dutch servers but the command servers in Russia and Panama are still working.
“These two C&C servers were responsible for pumping spam instructions to their zombies. With these two servers offline, the spam template inside Grum's memory will soon time out and the zombies will try to fetch new instructions but will not able to find them” – researchers from FireEye company said.
The Grum botnet was discovered at the beginning of July 2012. The experts claimed that the botnet spread almost 18% of the world’s spam on the Internet and was the third largest after the Cutwail and Lethic.