Last week Canadian security vendor Defence Intelligence reported that half the Fortune 100 companies have been compromised by a botnet they dubbed Mariposa. Discovered in May, Mariposa appears to have been built using the readily available butterfly bot kit. While the afflicted among the Fortune 100 haven’t stepped forward to corroborate this claim, the threat is definitely real.
Mikko Hypponen, Chief Research Officer for the Finnish security firm F-Secure, says F-Secure has been tracking this threat for many months. "Nobody just detects it as Mariposa", says Hypponen. "Depending on the variant, we detect these as Palevo or Vaklik". F-Secure has received hundreds of these samples in the last 18 months.