Jump to content

Travnet trojan could be part of APT campaign: Difference between revisions

From Botnets.fr
No edit summary
 
m Text replacement - " blogs.mcafee.com" to ""
 
(One intermediate revision by the same user not shown)
Line 1: Line 1:
{{Publication
{{Publication
|Type=Blogpost
|Type=Blogpost
|Link=http://blogs.mcafee.com/mcafee-labs/travnet-trojan-could-be-part-of-apt-campaign blogs.mcafee.com
|Link=http://blogs.mcafee.com/mcafee-labs/travnet-trojan-could-be-part-of-apt-campaign
|Author=Vikas Taneja
|Author=Vikas Taneja
|NomRevue=McAfee Labs Blog central
|NomRevue=McAfee Labs Blog central

Latest revision as of 20:04, 5 August 2015

(Publication) Google search: [1]

Travnet trojan could be part of APT campaign
Botnet Travnet
Malware
Botnet/malware group
Exploit kits
Services
Feature
Distribution vector
Target
Origin
Campaign
Operation/Working group
Vulnerability
CCProtocol
Date 2013 / 2013-03-14
Editor/Conference McAfee
Link http://blogs.mcafee.com/mcafee-labs/travnet-trojan-could-be-part-of-apt-campaign (Archive copy)
Author Vikas Taneja
Type Blogpost

Abstract

“ Attackers use all kinds of attack vectors to steal sensitive information from their targets. Their efforts are not limited to only zero-day vulnerabilities. Malware authors often exploit old vulnerabilities because a large number of organizations still use old vulnerable software. The Trojan Travnet, which steals information, is a classic example of malware that takes advantage of unpatched software. We have recently observed malicious Travnet RTF and Excel documents that exploit old vulnerabilities, such as CVE-2010-3333, in Microsoft Office. During our investigation we identified some samples associated with this campaign that have been active since 2009.

Bibtex

 @misc{Taneja2013BFR1322,
   editor = {McAfee},
   author = {Vikas Taneja},
   title = {Travnet trojan could be part of APT campaign},
   date = {14},
   month = Mar,
   year = {2013},
   howpublished = {\url{http://blogs.mcafee.com/mcafee-labs/travnet-trojan-could-be-part-of-apt-campaign}},
 }