Eric.freyssinet: Text replacement - " prevx.com" to ""

2015-08-05T20:48:41Z

Text replacement - " prevx.com" to ""

← Older revision		Revision as of 20:48, 5 August 2015
Line 5:		Line 5:
	\|Licence=		\|Licence=
	\|Video=		\|Video=
	\|Link=http://pxnow.prevx.com/content/blog/carberp-a_modular_information_stealing_trojan.pdf ~~prevx.com~~		\|Link=http://pxnow.prevx.com/content/blog/carberp-a_modular_information_stealing_trojan.pdf
	\|Author=Marco Giuliani, Andrea Allievi,		\|Author=Marco Giuliani, Andrea Allievi,
	\|NomRevue=Prevx Advanced Malware Research Team		\|NomRevue=Prevx Advanced Malware Research Team

Eric.freyssinet: 1 revision imported

2015-02-07T14:22:34Z

1 revision imported

← Older revision		Revision as of 14:22, 7 February 2015
(No difference)

Eric.freyssinet at 14:13, 28 January 2012

2012-01-28T14:13:51Z

New page

{{Publication
|Image=
|Legend=
|Document=
|Licence=
|Video=
|Link=http://pxnow.prevx.com/content/blog/carberp-a_modular_information_stealing_trojan.pdf prevx.com
|Author=Marco Giuliani, Andrea Allievi,
|NomRevue=Prevx Advanced Malware Research Team
|Date=28 février 2011
|Editor=Prevx
|Year=2011
|Page=
|Abstract=Nowadays most banking operations and payments are done on the web, through e-banking services and online payment solutions, like MoneyBookers or Paypal. Since online transactions are increasing their volume, malware authors are focusing more and more on the development of malicious software able to steal sensitive data from the infected computers.
Today there are several kits sold online, botnet solutions available to everyone, developed to build up in a couple of minutes a brand new version of a specific Trojan able to hide itself from antivirus scanners and armored by some interesting features like remote control and sensitive data stealing routines. 
With an expense of just 700/800 dollars – such kits are not expensive - a potential attacker could gain several thousands of dollars and he could build up his own botnet that can be then sold or rent, or yet used to attack sensitive websites.
The two most infamous botnet kits available online were ZeuS and SpyEye, and we already talked about them in our blog posts here and here. 
It looks like that between Q3/Q4 2010 ZeuS author decided to stop the development of his trojan and chose to sell the source code to the authors of SpyEye, giving to it the leadership of info stealing trojans.
We have already analyzed the last variant of SpyEye with ZeuS enhancements here in our Prevx blog.
During the second half of 2010 we have monitored the growth of a new trojans available on the underground market: it is called Carberp. 
After some cycles of hard development, today Carberp has probably become the second worst threat to customers data, following SpyEye. 
In this paper we are going to analyze this trojan in depth, looking at how it is evolved and what we can expect in the future from the team behind this trojan. 
|Botnet=Carberp,
|Malware=,
}}

Carberp - a modular information stealing trojan - Revision history

Eric.freyssinet: Text replacement - " prevx.com" to ""

Eric.freyssinet: 1 revision imported

Eric.freyssinet at 14:13, 28 January 2012