View source for Probing the Gozi-Prinimalka campaign

{{Publication
|Link=http://blog.trendmicro.com/trendlabs-security-intelligence/probing-the-gozi-prinimalka-malware/
|Author=Ivan Macalintal
|NomRevue=TrendLabs Security Intelligence Blog
|Date=2012-11-13
|Editor=Trend Micro
|Year=2012
|Botnet=Gozi, Prinimalka
|Abstract=To find out more about this Gozi-Prinimalka malware, we acquired samples and analyzed them to check the malware’s routines and notable behaviors. The first sample, detected as BKDR_URSNIF.B, monitors users’ browsing activities. It gathers information if it contains specific strings related to banking and financial institutions such as PayPal, Wells Fargo, and Wachovia among others.
}}