View source for File infector Expiro hits US, steals FTP credentials

{{Publication
|Type=Blogpost
|Link=http://blog.trendmicro.com/trendlabs-security-intelligence/file-infector-expiro-hits-us-steals-ftp-credentials/
|Author=Rhena Inocencio
|NomRevue=TrendLabs Security Intelligence Blog
|Date=2013-07-15
|Editor=Trend Micro
|Year=2013
|Botnet=Expiro
|Abstract=An unusual attack has been spotted in the wild, using an unexpected combination of threats. This attack used exploit kits (in particular Java and PDF exploits) to deliver file infectors onto vulnerable systems. Interestingly, these file infectors have information theft routines, which is a behavior not usually found among file infectors. These malware are part of PE_EXPIRO family, file infectors that was first spotted spotted in 2010. In addition to standard file infection routines, the variants seen in this attack also have information theft routines, an uncommon routine for file infectors.
}}