View source for Clampi/Ligats/Ilomo trojan

{{Publication
|Image=
|Legend=
|Document=
|Licence=
|Video=
|Link=http://www.secureworks.com/research/threats/clampi-trojan/
|Author=Joe Stewart, 
|NomRevue=SecureWorks threat analyses
|Date=29 juillet 2009
|Editor=DELL SecureWorks
|Year=2009
|Page=
|Abstract=Clampi (also known as Ligats, Ilomo or Rscan) is a Trojan designed to steal credentials from infected systems. Joe Stewart, SecureWorks Director of Malware Research for the Counter Threat Unit (CTU), first delved into Clampi in 2007 and as a result, SecureWorks successfully implemented countermeasures beginning in 2007 to protect its clients against Clampi.

In early 2009, Stewart decided to launch a full-blown investigation of the very elusive Trojan because of its use of the psexec tools to spread.  In recent months, Clampi has successfully spread across Microsoft networks in a worm-like fashion. Stewart predicts that hundreds of thousands of corporate and home pc users are infected with Clampi. Clampi is stealing a tremendous amount of data, including financial data, via infected corporate and home users.
|Botnet=Clampi, Ligats, Ilomo, Rscan, 
|Malware=, 
|CCProtocol=, 
|Operation=, 
}}