Waledac gets cozy with Virut: Difference between revisions
Appearance
m 1 revision imported |
m Text replacement - " www.symantec.com" to "" |
||
| Line 1: | Line 1: | ||
{{Publication | {{Publication | ||
|Type=Blogpost | |Type=Blogpost | ||
|Link=http://www.symantec.com/connect/blogs/waledac-gets-cozy-virut | |Link=http://www.symantec.com/connect/blogs/waledac-gets-cozy-virut | ||
|Author=Denis Carmody | |Author=Denis Carmody | ||
|NomRevue=Symantec Connect | |NomRevue=Symantec Connect | ||
Latest revision as of 19:50, 5 August 2015
(Publication) Google search: [1]
| Waledac gets cozy with Virut | |
|---|---|
| Botnet | Virut, Waledac |
| Malware | |
| Botnet/malware group | |
| Exploit kits | |
| Services | |
| Feature | |
| Distribution vector | |
| Target | |
| Origin | |
| Campaign | |
| Operation/Working group | |
| Vulnerability | |
| CCProtocol | |
| Date | 2013 / 2013-01-14 |
| Editor/Conference | Symantec |
| Link | http://www.symantec.com/connect/blogs/waledac-gets-cozy-virut (Archive copy) |
| Author | Denis Carmody |
| Type | Blogpost |
Abstract
“ During our further analysis of recent Virut samples, we observed the virus downloading a botnet variant named Waledac (also know Kelihos), which Symantec detects as W32.Waledac.D. The Waledac family is a threat that has been monitored by Symantec for many years and was featured in numerous blogs as well as a white paper. In the past, the Waledac botnet has also been subject to takedown efforts from the security community to curtail its operations. On each occasion the miscreants behind the botnet were able to recover from these disruptions and continue their operations, distributing spam and performing other malicious functions.
Bibtex
@misc{Carmody2013BFR1281,
editor = {Symantec},
author = {Denis Carmody},
title = {Waledac gets cozy with Virut},
date = {14},
month = Jan,
year = {2013},
howpublished = {\url{http://www.symantec.com/connect/blogs/waledac-gets-cozy-virut}},
}