SpyEye: Difference between revisions

Latest revision as of 20:48, 20 August 2015

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

SpyEye
Alias
Group	Banking
Parent
Sibling
Family
Relations	Variants: Pobelka Sibling of: Alebrije Parent of: Mariachi, Tilon Distribution of: Campaigns:
Target
Origin
Distribution vector	Harnig
UserAgent
CCProtocol
Activity	2009-12 /
Status
Language
Programming language
Operation/Working group	Operation b71

Introduction

Features

Associated images

Checksums / AV databases

Publications

	Author	Editor	Year
Carberp: Silent trojan, eventual successor to ZeuS	Carlos Zevallos	InfoSpyware	2011
Cracking into the new P2P variant of Zeusbot/Spyeye	Andrea Lelli	Symantec	2011
DNS: a botnet dialect	Francisco J. Gómez Rodríguez Carlos Díaz Hidalgo	Iniqua	2012
Demystifying Pobelka	Michael Sandee	Fox-IT	2013
Harnig botnet: a retreating army	Atif Mushtaq	FireEye	2011
Latest SpyEye botnet active and cheaper	Umesh Wanve	McAfee	2012
Microsoft and financial services industry leaders target cybercriminal operations from ZeuS botnets	Richard Domingues Boscovich	Microsoft	2012
SIM-ple: mobile handsets are weak link in latest online banking fraud scheme	Amit Klein	Trusteer	2012
SIRv12	Joe Faulhaber David Felstead Paul Henry Jeff Jones Jimmy Kuo Marc Lauricella Dave Probert Tim Rains Frank Simorjay Holly Stewart Matt Thomlinson Scott Wu Terry Zink Dennis Batchelder Shah Bawany Joe Blackbird Eve Blakemore Sarmad Fayyaz Nitin Kumar Goel Ken Malcolmson Nam Ng Mark Oram Daryl Pecelj	Microsoft	2012
SpyEye being kicked to the curb by its customers?	Sean Bodmer	Damballa	2012
The Cridex trojan targets 137 financial organizations in one go	Daniel Chechik	M86 Security Labs	2012
The evolution of webinjects	Jean-Ian Boutin	Virus Bulletin	2014
Win32/Gataka: a banking Trojan ready to take off	Jean-Ian Boutin	ESET	2012
ZeuSbot/Spyeye P2P updated, fortifying the botnet	Andrea Lelli	Symantec	2012

Cheval de Troie qui dérobe des informations bancaires par enregistrement de frappe récupération de formulaire, prise de capture d'écran et récemment même par vidéo MKV.

Connexion entre Gribodemon et les forums

Lien externe

Template:En Review of the SpyEye Toolkit v1.3.45
(en) SpyEye bank Trojan hides its fraud footprint - 05-01-2012 Sophos Blog article more about the malware part than the botnet

@@ Line 1: / Line 1: @@
 {{Botnet
-| Introduction=
+|Vector=Harnig,
-| Fonctionnalités=
+|CCProtocol=,
-| Commandes=
+|BeginYear=2009-12
-| Infrastructure=
+|Group=Banking
-| Commercialisation=
+|Fonctionnalités=
-| UserAgent=Unknown
+|Commandes=
-| Group=Banking
+|Infrastructure=
-| CCProtocol=Unknown, ,
+|Commercialisation=
- | Target=Unknown, , ,
+|Victime1=
-| BeginYear=Unknown
+|Victime2=
-| EndYear=Unknown
+|Victime3=
-| Status=Unknown
+|Victime4=
-| Victime1=
-| Victime2=
-| Victime3=
-| Victime4=
-| Alias=
 }}
 Cheval de Troie qui dérobe des informations bancaires par enregistrement de frappe récupération de formulaire, prise de capture d'écran et récemment même par vidéo MKV.
 {|
-|[[Fichier:Gribodemon.png|200px|thumb|left|Connexion entre Gribodemon et les forums]]
+|[[File:Gribodemon.png|200px|thumb|left|Connexion entre Gribodemon et les forums]]
-|[[Fichier:SpyEye_1.3.48.png|200px|thumb|left|SpyEye 1.3.48]]
+|[[File:SpyEye_1.3.48.png|200px|thumb|left|SpyEye 1.3.48]]
-|[[Fichier:Maincp.png|200px|thumb|left|CN1]]
+|[[File:Maincp.png|200px|thumb|left|CN1]]
-|[[Fichier:Frmcp.png|200px|thumb|left|SYN1]]
+|[[File:Frmcp.png|200px|thumb|left|SYN1]]
 |}