Eric.freyssinet: Text replacement - " blog.fireeye.com" to ""

2015-08-05T19:43:36Z

Text replacement - " blog.fireeye.com" to ""

← Older revision		Revision as of 19:43, 5 August 2015
Line 1:		Line 1:
	{{Publication		{{Publication
	\|Link=http://blog.fireeye.com/research/2012/08/guys-behind-gauss-and-flame-are-the-same.html ~~blog.fireeye.com~~		\|Link=http://blog.fireeye.com/research/2012/08/guys-behind-gauss-and-flame-are-the-same.html
	\|Author=Ali Islam		\|Author=Ali Islam
	\|NomRevue=FireEye Malware Intelligence Lab		\|NomRevue=FireEye Malware Intelligence Lab

Eric.freyssinet: 1 revision imported

2015-02-07T14:27:42Z

1 revision imported

← Older revision		Revision as of 14:27, 7 February 2015
(No difference)

Eric.freyssinet at 23:47, 24 November 2012

2012-11-24T23:47:31Z

New page

{{Publication
|Link=http://blog.fireeye.com/research/2012/08/guys-behind-gauss-and-flame-are-the-same.html blog.fireeye.com
|Author=Ali Islam
|NomRevue=FireEye Malware Intelligence Lab
|Date=2012-08-23
|Editor=FireEye
|Year=2012
|Botnet=Gauss, Flame
|CCProtocol=HTTP
|Abstract=The Gauss malware, which was in the media recently for its stealth and notorious payload, is now back from its dormant state with a surprise. We recently discovered a very interesting shift in the Gauss malware CnC communication. Gauss bot masters have directed their zombies to connect to the Flame/SkyWiper CnC to take commands.
----
UPDATE: In our post earlier today, we concluded that there was some sort of relationship between the Gauss and Flame malware actors based on observing CnC communication going to the Flame CnC IP address. At the same time, the CnC domains of Gauss were sink-holed to the same CnC IP. There was no indication or response in the communication originating from the CnC server to indicate that it may have been owned by another member of the security research community. In light of new information shared by the security community, we now know that our original conclusions were incorrect and we cannot associate these two malware families based solely upon these common CnC coordinates.

We apologize for any confusion that has resulted from our earlier assumptions. Unfortunately, the lack of a common information exchange about such activities can result in misleading conclusions.
}}

Guys behind Gauss and Flame are the same - Revision history

Eric.freyssinet: Text replacement - " blog.fireeye.com" to ""

Eric.freyssinet: 1 revision imported

Eric.freyssinet at 23:47, 24 November 2012