Eric.freyssinet: 1 revision imported

2015-02-07T14:23:03Z

1 revision imported

New page

{{Publication
|Image=carberp_eset_1.png
|Legend=
|Document=
|Licence=
|Video=
|Link=http://blog.eset.com/2011/11/21/evolution-of-win32carberp-going-deeper blog.eset.com
|Author=David Harley, Dmitry Volkov, Eugene Rodionov, Aleksandr Matrosov,
|NomRevue=ESET Threat Blog
|Date=5th December 2011
|Editor=ESET
|Year=2011
|ISBN=
|Page=
|Abstract=This month we discovered new information on a new modification in the Win32/TrojanDownloader.[[Carberp]] trojan family. This trojan is notorious as one of the most widely spread malicious programs in Russia, stealing money from remote banking systems and primarily targeting companies which perform a huge number of financial transactions a day. We already shed some light on this malware in our CARO 2011 presentation “Cybercrime in Russia: Trends and issues”. The cybercrime group behind this Trojan is very active in the territory of Russia and the former Soviet republics. We spotted the first cases related to the [[Carberp]] trojan around the end of 2010 and in the middle of the summer of 2011 we can see from the following graph that there was a big spike in the number of detections, a pattern which has been repeated at the beginning of the fall.
|Botnet=Carberp,
|Malware=Carberp (bot), Rovnix, Hotdrop, DRPdoor, Sheldor,
|CCProtocol=,
|Operation=,
}}

Evolution of Win32Carberp: going deeper - Revision history

Eric.freyssinet: 1 revision imported