W32.Shadesrat (Blackshades) author arrested - Revision history

Eric.freyssinet: Text replacement - " www.symantec.com" to ""

2015-08-05T19:50:19Z

Text replacement - " www.symantec.com" to ""

← Older revision		Revision as of 19:50, 5 August 2015
Line 7:		Line 7:
	\|Date=June 30,2012		\|Date=June 30,2012
	\|Editor=Symantec		\|Editor=Symantec
	\|Link=http://www.symantec.com/connect/blogs/w32shadesrat-blackshades-author-arrested ~~www.symantec.com~~		\|Link=http://www.symantec.com/connect/blogs/w32shadesrat-blackshades-author-arrested
	\|Author=,		\|Author=,
	\|Abstract=In a global sting operation carried out by the FBI, over 24 people have been arrested, including an individual named Michael Hogue, a.k.a. "xVisceral". According to an underground forum post, xVisceral is involved in the Blackshades project, at the very least as a project manager. It is likely, however, that this Remote Access Tool (RAT) is the work of more than one individual.		\|Abstract=In a global sting operation carried out by the FBI, over 24 people have been arrested, including an individual named Michael Hogue, a.k.a. "xVisceral". According to an underground forum post, xVisceral is involved in the Blackshades project, at the very least as a project manager. It is likely, however, that this Remote Access Tool (RAT) is the work of more than one individual.

Eric.freyssinet at 23:09, 30 July 2015

2015-07-30T23:09:43Z

← Older revision		Revision as of 23:09, 30 July 2015
Line 1:		Line 1:
	{{Publication		{{Publication
	\|Image=blackshades1.png		\|Image=blackshades1.png
	\|~~Legend~~=		\|Botnet=BlackShades,
	\|~~Document~~=		\|Malware=Shadesrat,
	\|~~Licence=~~		\|CCProtocol=,
	~~\|Video=~~		\|Year=2012
	~~\|Link=http://www.symantec.com/connect/blogs/w32shadesrat-blackshades-author-arrested www.symantec.com~~
	~~\|Author~~=,
	\|~~NomRevue~~=~~Symantec Connect Community~~
	\|Date=June 30,2012		\|Date=June 30,2012
	\|Editor=Symantec		\|Editor=Symantec
	\|~~Year~~=~~2012~~		\|Link=http://www.symantec.com/connect/blogs/w32shadesrat-blackshades-author-arrested www.symantec.com
	\|~~ISBN=~~		\|Author=,
	~~\|Page~~=
	\|Abstract=In a global sting operation carried out by the FBI, over 24 people have been arrested, including an individual named Michael Hogue, a.k.a. "xVisceral". According to an underground forum post, xVisceral is involved in the Blackshades project, at the very least as a project manager. It is likely, however, that this Remote Access Tool (RAT) is the work of more than one individual.		\|Abstract=In a global sting operation carried out by the FBI, over 24 people have been arrested, including an individual named Michael Hogue, a.k.a. "xVisceral". According to an underground forum post, xVisceral is involved in the Blackshades project, at the very least as a project manager. It is likely, however, that this Remote Access Tool (RAT) is the work of more than one individual.

Line 19:		Line 15:

	The coder for the tool appears to be "MarjinZ". The source code for BlackShades was leaked in 2010 and both aliases appear in the chat server admin database.		The coder for the tool appears to be "MarjinZ". The source code for BlackShades was leaked in 2010 and both aliases appear in the chat server admin database.
	\|~~Botnet~~=~~Blackshades,~~		\|Document=
	\|~~Malware~~=~~Shadesrat,~~		\|Licence=
	\|~~CCProtocol~~=,		\|Video=
	\|Operation=,		\|NomRevue=Symantec Connect Community
	\|Keyword=,		\|ISBN=
			\|Page=
			\|Operation=,
			\|Keyword=,
	}}		}}

Eric.freyssinet: 1 revision imported

2015-02-07T14:27:05Z

1 revision imported

New page

{{Publication
|Image=blackshades1.png
|Legend=
|Document=
|Licence=
|Video=
|Link=http://www.symantec.com/connect/blogs/w32shadesrat-blackshades-author-arrested www.symantec.com
|Author=,
|NomRevue=Symantec Connect Community
|Date=June 30,2012
|Editor=Symantec
|Year=2012
|ISBN=
|Page=
|Abstract=In a global sting operation carried out by the FBI, over 24 people have been arrested, including an individual named Michael Hogue, a.k.a. "xVisceral". According to an underground forum post, xVisceral is involved in the Blackshades project, at the very least as a project manager. It is likely, however, that this Remote Access Tool (RAT) is the work of more than one individual.

"MICHAEL HOGUE, a/k/a "xVisceral," offered malware for sale, including remote access tools ("RATS") that allowed the user to take over and remotely control the operations of an infected victim-computer. HOGUE's RAT, for example, enabled the user to turn on the web camera on victims' computers and spy on them, and to record every keystroke of the victim-computer's user. If the victim visited a banking website and entered his or her user name and password, the key logging program could record that information, which could then be used to access the victim's bank account. HOGUE sold his RAT widely over the Internet, usually for $50 per copy and boasted that he had personally infected "50-100" computers with his RAT, and that he'd sold it to others who had infected "thousands" of computers with malware. HOGUE's RAT infected computers in the United States, Canada, Germany, Denmark, and Poland, and possibly other countries."
Source: United States Attorney's Office

The coder for the tool appears to be "MarjinZ". The source code for BlackShades was leaked in 2010 and both aliases appear in the chat server admin database.
|Botnet=Blackshades,
|Malware=Shadesrat,
|CCProtocol=,
|Operation=,
|Keyword=,
}}