Eric.freyssinet: 1 revision imported

2015-02-07T14:22:52Z

1 revision imported

← Older revision		Revision as of 14:22, 7 February 2015
(No difference)

Eric.freyssinet at 14:14, 5 February 2012

2012-02-05T14:14:09Z

New page

{{Publication
|Image=
|Legend=
|Document=
|Licence=
|Video=
|Link=http://www.secureworks.com/research/threats/clampi-trojan/
|Author=Joe Stewart,
|NomRevue=SecureWorks threat analyses
|Date=29 juillet 2009
|Editor=DELL SecureWorks
|Year=2009
|Page=
|Abstract=Clampi (also known as Ligats, Ilomo or Rscan) is a Trojan designed to steal credentials from infected systems. Joe Stewart, SecureWorks Director of Malware Research for the Counter Threat Unit (CTU), first delved into Clampi in 2007 and as a result, SecureWorks successfully implemented countermeasures beginning in 2007 to protect its clients against Clampi.

In early 2009, Stewart decided to launch a full-blown investigation of the very elusive Trojan because of its use of the psexec tools to spread. In recent months, Clampi has successfully spread across Microsoft networks in a worm-like fashion. Stewart predicts that hundreds of thousands of corporate and home pc users are infected with Clampi. Clampi is stealing a tremendous amount of data, including financial data, via infected corporate and home users.
|Botnet=Clampi, Ligats, Ilomo, Rscan,
|Malware=,
|CCProtocol=,
|Operation=,
}}

Clampi/Ligats/Ilomo trojan - Revision history

Eric.freyssinet: 1 revision imported

Eric.freyssinet at 14:14, 5 February 2012