Ramnit

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Ramnit
Alias
Group	Stealing, Banking
Parent	ZeuS
Sibling
Family
Relations	Variants: Sibling of: Parent of: Distribution of: Campaigns:
Target
Origin
Distribution vector
UserAgent
CCProtocol
Activity	2010 /
Status
Language
Programming language
Operation/Working group

Introduction

Ramnit evolves into a banking botnet class in August 2011 by integrating ZeuS code.

Features

• Domain generation algorithm

• FTP password theft

• Backdoor

• Banking credential theft

• File download

• Screen capture

• Update

• Cookie theft

Publications

	Author	Editor	Year
Blackhole Ramnit - samples and analysis	Mila Parkour		2012
Bot of the day: Ramnit/Ninmul	Matthew Jonkman		2011
Part virus, part botnet, spreading fast: Ramnit moves past Facebook passwords	Sean Gallagher	Arstechnica	2012
Ramnit goes social		Seculert	2012
Rmnet.12 created a million Windows computer botnet		DrWeb	2012
SIRv12	Joe Faulhaber David Felstead Paul Henry Jeff Jones Jimmy Kuo Marc Lauricella Dave Probert Tim Rains Frank Simorjay Holly Stewart Matt Thomlinson Scott Wu Terry Zink Dennis Batchelder Shah Bawany Joe Blackbird Eve Blakemore Sarmad Fayyaz Nitin Kumar Goel Ken Malcolmson Nam Ng Mark Oram Daryl Pecelj	Microsoft	2012
Zeroing in on malware propagation methods	Joe Faulhaber David Felstead Paul Henry Jeff Jones Ellen Cram Kowalczyk Jimmy Kuo John Lambert Marc Lauricella Aaron Margosis Michelle Meyer Anurag Pandit Anthony Penta Dave Probert Tim Rains Mark E. Russinovich Weijuan Shi Adam Shostack Frank Simorjay Hemanth Srinivasan Holly Stewart Matt Thomlinson Jeff Williams Scott Wu Terry Zink	Microsoft	2011