Re: I think the best way to describe this
"I think its a good thing, and there should be more of it, the only drawback is its dependency on central C&C."
Looking at the attacks they interrogate various aspects of the system although it's not immediately obvious what they were doing with it. The second one in particular collects quite a lot of detail. This puzzled me until I realised it wasn't a script running on the device, it was running on the C & C server which will be collecting intelligence on the devices being attacked. It seems quite possible that this is in part an analysis phase to design a worm which will brick devices a whole lot faster.
Biting the hand that feeds IT
