Eric.freyssinet: 1 revision imported

2015-02-07T14:29:30Z

1 revision imported

← Older revision		Revision as of 14:29, 7 February 2015
(No difference)

Eric.freyssinet at 11:01, 2 February 2013

2013-02-02T11:01:43Z

New page

{{Publication
|Type=White paper
|Link=http://www.mcafee.com/us/resources/white-papers/wp-citadel-trojan.pdf www.mcafee.com
|Author=Ryan Sherstobitoff
|Date=2013-01-31
|Editor=McAfee
|Year=2013
|Botnet=Citadel
|Abstract=Zeus “banking” malware and its variants have been making headlines in recent months. One variant, the Citadel Trojan, has now taken the spotlight with the news of its withdrawal from the open crimeware market.

Recently the author of Citadel, Aquabox, has been banned from a large online forum that sells malware
and other services to cybercriminals. Some in the security industry predict that this will be the downfall
of the Citadel Trojan; this very well may be the case. However, at the moment McAfee Global Threat
Intelligence shows that Citadel remains a very active threat and continues to target victims in several
countries. As with any sophisticated malware—such as Zeus and SpyEye—that ceases development, this
Trojan’s use will continue as long as it provides value to cybercriminal operations.

McAfee Labs concludes that some groups have shifted tactics to use Citadel in ways other than what it was originally intended for. We also see from our telemetry data gathered from the field that Citadel still remains active in many parts of the world.
}}

Inside the world of the Citadel trojan - Revision history

Eric.freyssinet: 1 revision imported

Eric.freyssinet at 11:01, 2 February 2013