From time to time we see malware writers claim or ask for recognition of their malware. They usually leave messages in the virus body for the AV companies to see. They might ask for jobs, or offer help to detect something–you will never understand a malware writer’s mind.

Today I was analyzing YAB (yet-another-bot) and found the following message in the virus body:

“ATTN ANTIVIRUS EMPLOYEE: If you’re going to name my very nicely coded modular bot, at least give it the proper name of ‘[Name Removed]Bot.’ Lots of love, Author of [Name Removed]Bot.”

Of course, we will NOT put the author’s name on the bot, so it will remain just a regular bot.