Leouncia - Yet another backdoor - Revision history

Eric.freyssinet: Text replacement - " blog.fireeye.com" to ""

2015-08-05T19:50:51Z

Text replacement - " blog.fireeye.com" to ""

← Older revision		Revision as of 19:50, 5 August 2015
Line 1:		Line 1:
	{{Publication		{{Publication
	\|Link=http://blog.fireeye.com/research/2010/12/leouncia-yet-another-backdoor.html ~~blog.fireeye.com~~		\|Link=http://blog.fireeye.com/research/2010/12/leouncia-yet-another-backdoor.html
	\|Author=Atif Mushtaq		\|Author=Atif Mushtaq
	\|NomRevue=Malware Intelligence Lab		\|NomRevue=Malware Intelligence Lab

Eric.freyssinet: 1 revision imported

2015-02-07T14:28:36Z

1 revision imported

← Older revision		Revision as of 14:28, 7 February 2015
(No difference)

Eric.freyssinet: Remplacement du texte — « Vinself » par « VinSelf »

2012-11-17T17:13:16Z

Remplacement du texte — « Vinself » par « VinSelf »

New page

{{Publication
|Link=http://blog.fireeye.com/research/2010/12/leouncia-yet-another-backdoor.html blog.fireeye.com
|Author=Atif Mushtaq
|NomRevue=Malware Intelligence Lab
|Date=2010-12-14
|Editor=FireEye
|Year=2010
|Botnet=Leouncia
|Abstract=This is the second article in a row where I am going to disclose the presence of another new backdoor malware. I have recently seen this backdoor emerging on the threat landscape while investigating some targeted attacks. I named this malware Leouncia. Why? I'll make it clear later.

Like VinSelf, Leouncia is a powerful backdoor that is designed to take complete control over the infected machine. In terms of code base, both malware look very different, but during my investigation, I found some definite design similarities. I also found additional evidence that is sufficient to link the botnet operators behind these two malware.
}}