https://www.botnets.fr/index.php?action=history&feed=atom&title=Sinowal_analysis_%28Windows_7%2C_32-bit%29Sinowal analysis (Windows 7, 32-bit) - Revision history2026-10-25T11:09:52ZRevision history for this page on the wikiMediaWiki 1.43.11https://www.botnets.fr/index.php?title=Sinowal_analysis_(Windows_7,_32-bit)&diff=2017&oldid=prevEric.freyssinet: 1 revision imported2015-02-07T14:23:28Z<p>1 revision imported</p>
<p><b>New page</b></p><div>{{Publication<br />
|Image=<br />
|Legend=<br />
|Document=<br />
|Licence=<br />
|Video=<br />
|Link=http://www.evild3ad.com/?p=1556 www.evild3ad.com<br />
|Author=evild3ad, <br />
|NomRevue=<br />
|Date=March 3, 2012<br />
|Editor=evild3ad.com<br />
|Year=2012<br />
|ISBN=<br />
|Page=<br />
|Abstract=Sinowal (also known as Torpig or Anserin) is constant one of the top banking trojan all over the world since 2006. So I asked myself, why is there so little info on the web? Just found old articles, that’s why I decided to take a new look at Sinowal.<br />
<br />
Sinowal is a spyware trojan that can be used to perform post-authentication man-in-the-middle (MitM) content-manipulation attacks, a fancy way of saying that it can change basically anything sent or received between your browser and any web server in any HTTP session, even those encrypted by TLS/SSL. It’s also been incorporated with a boot sector rootkit known as Mebroot (MAOS).<br />
|Botnet=Torpig, <br />
|Malware=Sinowal, Mebroot, <br />
|CCProtocol=, <br />
|Operation=, <br />
|Keyword=, <br />
}}</div>Eric.freyssinet