Eric.freyssinet: 1 revision imported

2015-02-07T14:28:08Z

1 revision imported

New page

{{Publication
|Image=
|Legend=
|Document=
|Licence=
|Video=
|Link=http://www.csis.dk/downloads/Tinba_White_Paper.pdf www.csis.dk
|Author=Peter Kruse,
|NomRevue=Threat Report
|Date=
|Editor=Trend Micro
|Year=2012
|ISBN=
|Page=
|Abstract=The following report contains a technical analysis of the Tinba Trojan-banker family.
The name “Tinba” was assigned by CSIS and represents the small size of this Trojanbanker (approximately 20 KB). The name is derived from the words “tiny” and
“bank.” The malware is also known as “Tinybanker” and “Zusy.”
This report focuses on several different variants of the Tinba Trojan and includes:
• Name and family
• MD5/SHA1
• Malware analysis
Based on the intelligence gathered during a four-month period of close monitoring,
this specific group is focused on Turkey. The infection map below outlines the areas
of Turkish attacks (see Figure 1).
Figure 1. Overview of the Tinba Trojan-banker Turkish attacks.
Zooming in closer provides a better view of the concentration of this campaign (see
Figure 2).
|Botnet=Tinba,
|Malware=,
|ExploitKit=,
|CCProtocol=,
|Operation=,
|Keyword=,
}}

W32.Tinba (Tinybanker) The turkish incident - Revision history

Eric.freyssinet: 1 revision imported