View source for Win32/Gataka: a banking Trojan ready to take off

{{Publication
|Image=Gataka1.png
|Legend=
|Document=
|Licence=
|Video=
|Link=http://blog.eset.com/2012/06/28/win32gataka-a-banking-trojan-ready-to-take-off blog.eset.com
|Author=Jean-Ian Boutin, 
|NomRevue=ESET Threat Blog
|Date=June 28,2012
|Editor=ESET
|Year=2012
|ISBN=
|Page=
|Abstract=We have been following the development of the Win32/Gataka banking Trojan for several months and can now share some details of its operation which includes facilitating fraudulent bank transfers. This first post will highlight some of its key features, while the second will detail several interesting, more technical aspects of this malware. This banking Trojan was first publicly discussed in 2011 by S21Security (http://securityblog.s21sec.com/2011/02/tatanga-new-banking-trojan-with-mitb.html) but has received surprisingly little attention since then.

Win32/Gataka has a similar architecture to SpyEye in that several plugins can be downloaded to add more functionality. It is developed in C++ and is overly verbose in both the debug strings in its binaries and the amount of logging information that is sent back to the C&C.
|Botnet=Gataka, SpyEye, 
|Malware=Tinba (bot), 
|CCProtocol=, 
|Operation=, 
|Keyword=, 
}}