Shylock - Revision history

Eric.freyssinet at 19:12, 20 August 2015

2015-08-20T19:12:21Z

← Older revision		Revision as of 19:12, 20 August 2015
Line 2:		Line 2:
	\|Alias=Caphaw		\|Alias=Caphaw
	\|MMPC=Backdoor:Win32/Caphaw.A,		\|MMPC=Backdoor:Win32/Caphaw.A,
			\|SymantecDocID=2011-092916-1617-99,
	\|BeginYear=2011		\|BeginYear=2011
	\|EndYear=2014		\|EndYear=2014

Eric.freyssinet at 19:11, 20 August 2015

2015-08-20T19:11:39Z

← Older revision		Revision as of 19:11, 20 August 2015
Line 3:		Line 3:
	\|MMPC=Backdoor:Win32/Caphaw.A,		\|MMPC=Backdoor:Win32/Caphaw.A,
	\|BeginYear=2011		\|BeginYear=2011
			\|EndYear=2014
	\|Group=Banking		\|Group=Banking
	\|Fonctionnalités=* Control of the system desktop, which allows the attacker to see the desktop, and to gain control of the mouse and keyboard		\|Fonctionnalités=* Control of the system desktop, which allows the attacker to see the desktop, and to gain control of the mouse and keyboard

Eric.freyssinet at 19:05, 20 August 2015

2015-08-20T19:05:23Z

← Older revision		Revision as of 19:05, 20 August 2015
Line 1:		Line 1:
	{{Botnet		{{Botnet
			\|Alias=Caphaw
			\|MMPC=Backdoor:Win32/Caphaw.A,
			\|BeginYear=2011
			\|Group=Banking
	\|Fonctionnalités=* Control of the system desktop, which allows the attacker to see the desktop, and to gain control of the mouse and keyboard		\|Fonctionnalités=* Control of the system desktop, which allows the attacker to see the desktop, and to gain control of the mouse and keyboard
	* Access to files and folder via a internal FTP server		* Access to files and folder via a internal FTP server
Line 7:		Line 11:
	* Update itself		* Update itself
	* Shut down or restart the computer		* Shut down or restart the computer
	~~\|UserAgent=~~
	~~\|CCProtocol=~~
	~~\|Target=~~
	~~\|Status=~~
	~~\|BeginYear=~~
	~~\|EndYear=~~
	~~\|Group=Banking~~
	~~\|Alias=Caphaw~~
	\|Vendor1=Microsoft		\|Vendor1=Microsoft
	\|Victime4=		\|Victime4=
	}}		}}

Eric.freyssinet: Text replacement - "=Unknown" to "="

2015-08-08T13:45:51Z

Text replacement - "=Unknown" to "="

← Older revision		Revision as of 13:45, 8 August 2015
Line 7:		Line 7:
	* Update itself		* Update itself
	* Shut down or restart the computer		* Shut down or restart the computer
	\|UserAgent=~~Unknown~~		\|UserAgent=
	\|CCProtocol=~~Unknown~~		\|CCProtocol=
	\|Target=~~Unknown~~		\|Target=
	\|Status=~~Unknown~~		\|Status=
	\|BeginYear=~~Unknown~~		\|BeginYear=
	\|EndYear=~~Unknown~~		\|EndYear=
	\|Group=Banking		\|Group=Banking
	\|Alias=Caphaw		\|Alias=Caphaw

Eric.freyssinet at 17:47, 1 December 2012

2012-12-01T17:47:22Z

New page

{{Botnet
|Fonctionnalités=* Control of the system desktop, which allows the attacker to see the desktop, and to gain control of the mouse and keyboard
* Access to files and folder via a internal FTP server
* Redirect Internet traffic via a proxy server
* Send ICMP packets that can be used in distributed denial-of-service (DDoS) attacks
* Log and redirect web traffic from Mozilla Firefox and Internet Explorer
* Update itself
* Shut down or restart the computer
|UserAgent=Unknown
|CCProtocol=Unknown
|Target=Unknown
|Status=Unknown
|BeginYear=Unknown
|EndYear=Unknown
|Group=Banking
|Alias=Caphaw
|Vendor1=Microsoft
|Victime4=
}}