New trojan found: Admin.HLP leaks organizations data - Revision history

Eric.freyssinet: 1 revision imported

2015-02-07T14:27:53Z

1 revision imported

← Older revision		Revision as of 14:27, 7 February 2015
(No difference)

Eric.freyssinet at 14:38, 21 December 2014

2014-12-21T14:38:28Z

← Older revision		Revision as of 14:38, 21 December 2014
Line 5:		Line 5:
	\|Year=2012		\|Year=2012
	\|Botnet=Admin.HLP		\|Botnet=Admin.HLP
	\|~~Extract~~=Radware’s ERT Research Lab released a threat alert regarding a new Trojan Key		\|Abstract=Radware’s ERT Research Lab released a threat alert regarding a new Trojan Key
	Logger malware, named Admin.HLP, that was found 28 August, 2012 for the first		Logger malware, named Admin.HLP, that was found 28 August, 2012 for the first
	time at one of its customers.		time at one of its customers.

Eric.freyssinet: Created page with "{{Publication |Link=http://blog.radware.com/security/2012/08/ert-threat-alert-new-trojan-found-admin-hlp-attacks-organization-data/ |Author=Eyal Benishti |Editor=ERT Threat Al..."

2014-12-21T14:38:09Z

Created page with "{{Publication |Link=http://blog.radware.com/security/2012/08/ert-threat-alert-new-trojan-found-admin-hlp-attacks-organization-data/ |Author=Eyal Benishti |Editor=ERT Threat Al..."

← Older revision		Revision as of 14:38, 21 December 2014
Line 1:		Line 1:
	{{Publication		{{Publication
	\|Link=http://blog.radware.com/security/2012/08/ert-threat-alert-new-trojan-found-admin-hlp-attacks-organization-data/ ~~blog.radware.com~~		\|Link=http://blog.radware.com/security/2012/08/ert-threat-alert-new-trojan-found-admin-hlp-attacks-organization-data/
	\|Author=Eyal Benishti		\|Author=Eyal Benishti
	\|~~NomRevue~~=ERT Threat Alert		\|Editor=ERT Threat Alert
	~~\|Date=28 août 2012~~
	~~\|Editor=Radware~~
	\|Year=2012		\|Year=2012
	\|Botnet=Admin.HLP		\|Botnet=Admin.HLP
	\|~~Abstract~~=Radware’s ERT Research Lab released a threat alert regarding a new Trojan Key		\|Extract=Radware’s ERT Research Lab released a threat alert regarding a new Trojan Key
	Logger malware, named Admin.HLP, that was found 28 August, 2012 for the first		Logger malware, named Admin.HLP, that was found 28 August, 2012 for the first
	time at one of its customers.		time at one of its customers.

Eric.freyssinet at 22:05, 28 August 2012

2012-08-28T22:05:20Z

New page

{{Publication
|Link=http://blog.radware.com/security/2012/08/ert-threat-alert-new-trojan-found-admin-hlp-attacks-organization-data/ blog.radware.com
|Author=Eyal Benishti
|NomRevue=ERT Threat Alert
|Date=28 août 2012
|Editor=Radware
|Year=2012
|Botnet=Admin.HLP
|Abstract=Radware’s ERT Research Lab released a threat alert regarding a new Trojan Key
Logger malware, named Admin.HLP, that was found 28 August, 2012 for the first
time at one of its customers.
Admin.HLP, the newly found Trojan, is malicious software that monitors keystrokes
on the victim’s computer, collects user passwords, credit card numbers and other
sensitive information. It then sends all the stolen data out of the organization to the
attackers’ remote servers over secured HTTPS connection.
The Admin.HLP Trojan is hidden within a standard windows help file named
Amministrazione.hlp and it is attached to emails. This standard help file does not
activate any installed anti-virus programs, and therefore it goes under the radar of
standard anti-virus solutions. Once the victim opens the Windows help file, the
Admin.HLP Trojan installs itself on the victim’s computer where it starts to collect
keystrokes. The Trojan periodically sends the stored keystrokes to the attackers’
remote server.
To remain a persistent Trojan threat, Admin.HLP creates a startup file in Windows,
guaranteeing that the Trojan is invoked after every restart of the computer.
}}