Eric.freyssinet: 1 revision imported

2015-02-07T14:27:04Z

1 revision imported

← Older revision		Revision as of 14:27, 7 February 2015
(No difference)

Eric.freyssinet at 13:38, 14 August 2012

2012-08-14T13:38:56Z

New page

{{Publication
|Image=Gataka1.png
|Legend=
|Document=
|Licence=
|Video=
|Link=http://blog.eset.com/2012/06/28/win32gataka-a-banking-trojan-ready-to-take-off blog.eset.com
|Author=Jean-Ian Boutin,
|NomRevue=ESET Threat Blog
|Date=June 28,2012
|Editor=ESET
|Year=2012
|ISBN=
|Page=
|Abstract=We have been following the development of the Win32/Gataka banking Trojan for several months and can now share some details of its operation which includes facilitating fraudulent bank transfers. This first post will highlight some of its key features, while the second will detail several interesting, more technical aspects of this malware. This banking Trojan was first publicly discussed in 2011 by S21Security (http://securityblog.s21sec.com/2011/02/tatanga-new-banking-trojan-with-mitb.html) but has received surprisingly little attention since then.

Win32/Gataka has a similar architecture to SpyEye in that several plugins can be downloaded to add more functionality. It is developed in C++ and is overly verbose in both the debug strings in its binaries and the amount of logging information that is sent back to the C&C.
|Botnet=Gataka, SpyEye,
|Malware=Tinba (bot),
|CCProtocol=,
|Operation=,
|Keyword=,
}}

Win32/Gataka: a banking Trojan ready to take off - Revision history

Eric.freyssinet: 1 revision imported

Eric.freyssinet at 13:38, 14 August 2012