Srizbi - Revision history

Eric.freyssinet: Text replacement - "Template-based spam" to "Produce spam from templates"

2015-08-14T04:45:04Z

Text replacement - "Template-based spam" to "Produce spam from templates"

← Older revision		Revision as of 04:45, 14 August 2015
Line 6:		Line 6:
	\|BeginYear=2007		\|BeginYear=2007
	\|Group=Spamming		\|Group=Spamming
	\|Fonctionnalités=* [[feature::~~Template-based~~ spam]]		\|Fonctionnalités=* [[feature::Produce spam from templates]]
	* [[feature::Upload minidump]] crash dump to C&C for debugging		* [[feature::Upload minidump]] crash dump to C&C for debugging
	\|Illustrations=		\|Illustrations=

Eric.freyssinet at 14:26, 8 August 2015

2015-08-08T14:26:10Z

← Older revision		Revision as of 14:26, 8 August 2015
Line 3:		Line 3:
	\|Parent=Reactor Mailer,		\|Parent=Reactor Mailer,
	\|CCProtocol=HTTP,		\|CCProtocol=HTTP,
	\|Feature=Domain generation algorithm,		\|Feature=Domain generation algorithm, Upload minidump,
	\|BeginYear=2007		\|BeginYear=2007
	\|Group=Spamming		\|Group=Spamming

Eric.freyssinet at 14:15, 7 August 2015

2015-08-07T14:15:28Z

← Older revision		Revision as of 14:15, 7 August 2015
Line 1:		Line 1:
	{{Botnet		{{Botnet
	\|Introduction=* [[parent::Reactor Mailer]] was its web based interface to send spam		\|Introduction=* [[parent::Reactor Mailer]] was its web based interface to send spam
	\|~~Target~~=~~Unknown~~		\|Parent=Reactor Mailer,
	\|CCProtocol=HTTP,		\|CCProtocol=HTTP,
			\|Feature=Domain generation algorithm,
	\|BeginYear=2007		\|BeginYear=2007
	\|Group=Spamming		\|Group=Spamming

Eric.freyssinet at 16:28, 2 August 2015

2015-08-02T16:28:55Z

← Older revision		Revision as of 16:28, 2 August 2015
Line 2:		Line 2:
	\|Introduction=* [[parent::Reactor Mailer]] was its web based interface to send spam		\|Introduction=* [[parent::Reactor Mailer]] was its web based interface to send spam
	\|Target=Unknown		\|Target=Unknown
	\|CCProtocol=~~Unknown~~		\|CCProtocol=HTTP,
	\|BeginYear=~~Unknown~~		\|BeginYear=2007
	\|Group=Spamming		\|Group=Spamming
	\|Fonctionnalités=* [[feature::Template-based spam]]		\|Fonctionnalités=* [[feature::Template-based spam]]

Eric.freyssinet at 12:56, 24 May 2015

2015-05-24T12:56:53Z

← Older revision		Revision as of 12:56, 24 May 2015
Line 1:		Line 1:
	{{Botnet		{{Botnet
	\|Introduction=* [[parent::Reactor Mailer]] was its web based interface to send spam		\|Introduction=* [[parent::Reactor Mailer]] was its web based interface to send spam
			\|Target=Unknown
			\|CCProtocol=Unknown
			\|BeginYear=Unknown
			\|Group=Spamming
	\|Fonctionnalités=* [[feature::Template-based spam]]		\|Fonctionnalités=* [[feature::Template-based spam]]
	* [[feature::Upload minidump]] crash dump to C&C for debugging		* [[feature::Upload minidump]] crash dump to C&C for debugging
Line 7:		Line 11:
	\|Infrastructure=* [[port::UDP/4099]] & [[port::TCP/4099]]		\|Infrastructure=* [[port::UDP/4099]] & [[port::TCP/4099]]
	\|Commercialisation=		\|Commercialisation=
	~~\|UserAgent=~~
	\|UserAgent2=		\|UserAgent2=
	\|UserAgent3=		\|UserAgent3=
Line 16:		Line 19:
	\|Language3=		\|Language3=
	\|Language4=		\|Language4=
	~~\|CCProtocol=Unknown~~
	\|CC2=		\|CC2=
	\|CC3=		\|CC3=
	~~\|Target=Unknown~~
	\|OS2=		\|OS2=
	\|OS3=		\|OS3=
	\|OS4=		\|OS4=
	~~\|Status=~~
	~~\|BeginYear=Unknown~~
	~~\|EndYear=~~
	~~\|Group=Spamming~~
	\|Groupe2=		\|Groupe2=
	~~\|Alias=Cbeplay~~
	\|Vendor1=		\|Vendor1=
	~~\|Alias=Exchanger~~
	\|Vendor2=		\|Vendor2=
	~~\|Alias=~~
	\|Vendor3=		\|Vendor3=
	~~\|Alias=~~
	\|Vendor4=		\|Vendor4=
	~~\|Alias=~~
	\|Vendor5=		\|Vendor5=
	~~\|Alias=~~
	\|Vendor6=		\|Vendor6=
	~~\|Alias=~~
	\|Vendor7=		\|Vendor7=
	~~\|Alias=~~
	\|Vendor8=		\|Vendor8=
	~~\|Alias=~~
	\|Vendor9=		\|Vendor9=
	~~\|Alias=~~
	\|Vendor10=		\|Vendor10=
	~~\|Vector=~~
	\|Exploitkit2=		\|Exploitkit2=
	\|Exploitkit3=		\|Exploitkit3=

Eric.freyssinet: 1 revision imported

2015-02-04T22:06:56Z

1 revision imported

← Older revision		Revision as of 22:06, 4 February 2015
(No difference)

Eric.freyssinet at 10:30, 28 August 2014

2014-08-28T10:30:23Z

New page

{{Botnet
|Introduction=* [[parent::Reactor Mailer]] was its web based interface to send spam
|Fonctionnalités=* [[feature::Template-based spam]]
* [[feature::Upload minidump]] crash dump to C&C for debugging
|Illustrations=
|Commandes=* Chaînes caractéristiques: \SystemRoot\Minidump\%s, Udp6, Tcp6, MachineNum
|Infrastructure=* [[port::UDP/4099]] & [[port::TCP/4099]]
|Commercialisation=
|UserAgent=
|UserAgent2=
|UserAgent3=
|UserAgent4=
|Mutexes=
|Language1=
|Language2=
|Language3=
|Language4=
|CCProtocol=Unknown
|CC2=
|CC3=
|Target=Unknown
|OS2=
|OS3=
|OS4=
|Status=
|BeginYear=Unknown
|EndYear=
|Group=Spamming
|Groupe2=
|Alias=Cbeplay
|Vendor1=
|Alias=Exchanger
|Vendor2=
|Alias=
|Vendor3=
|Alias=
|Vendor4=
|Alias=
|Vendor5=
|Alias=
|Vendor6=
|Alias=
|Vendor7=
|Alias=
|Vendor8=
|Alias=
|Vendor9=
|Alias=
|Vendor10=
|Vector=
|Exploitkit2=
|Exploitkit3=
|Exploitkit4=
|Exploitkit5=
|Victime1=
|Victime2=
|Victime3=
|Yara rules=
}}
== Lien externe ==
* {{en}} [http://krebsonsecurity.com/2012/01/pharma-wars-mr-srizbi-vs-mr-cutwail/ Pharma Wars: Mr. Srizbi vs. Mr. Cutwail] - “Google,” an alias chosen by the hacker in charge of the Cutwail spam botnet vs “SPM,” the brains behind the infamous Srizbi botnet