Travnet trojan could be part of APT campaign: Difference between revisions
Appearance
No edit summary |
m Text replacement - " blogs.mcafee.com" to "" |
||
| (One intermediate revision by the same user not shown) | |||
| Line 1: | Line 1: | ||
{{Publication | {{Publication | ||
|Type=Blogpost | |Type=Blogpost | ||
|Link=http://blogs.mcafee.com/mcafee-labs/travnet-trojan-could-be-part-of-apt-campaign | |Link=http://blogs.mcafee.com/mcafee-labs/travnet-trojan-could-be-part-of-apt-campaign | ||
|Author=Vikas Taneja | |Author=Vikas Taneja | ||
|NomRevue=McAfee Labs Blog central | |NomRevue=McAfee Labs Blog central | ||
Latest revision as of 20:04, 5 August 2015
(Publication) Google search: [1]
| Travnet trojan could be part of APT campaign | |
|---|---|
| Botnet | Travnet |
| Malware | |
| Botnet/malware group | |
| Exploit kits | |
| Services | |
| Feature | |
| Distribution vector | |
| Target | |
| Origin | |
| Campaign | |
| Operation/Working group | |
| Vulnerability | |
| CCProtocol | |
| Date | 2013 / 2013-03-14 |
| Editor/Conference | McAfee |
| Link | http://blogs.mcafee.com/mcafee-labs/travnet-trojan-could-be-part-of-apt-campaign (Archive copy) |
| Author | Vikas Taneja |
| Type | Blogpost |
Abstract
“ Attackers use all kinds of attack vectors to steal sensitive information from their targets. Their efforts are not limited to only zero-day vulnerabilities. Malware authors often exploit old vulnerabilities because a large number of organizations still use old vulnerable software. The Trojan Travnet, which steals information, is a classic example of malware that takes advantage of unpatched software. We have recently observed malicious Travnet RTF and Excel documents that exploit old vulnerabilities, such as CVE-2010-3333, in Microsoft Office. During our investigation we identified some samples associated with this campaign that have been active since 2009.
Bibtex
@misc{Taneja2013BFR1322,
editor = {McAfee},
author = {Vikas Taneja},
title = {Travnet trojan could be part of APT campaign},
date = {14},
month = Mar,
year = {2013},
howpublished = {\url{http://blogs.mcafee.com/mcafee-labs/travnet-trojan-could-be-part-of-apt-campaign}},
}