Difference between revisions of "Citadel"
Jump to navigation
Jump to search
Line 7: | Line 7: | ||
|UserAgent=Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.1) | |UserAgent=Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.1) | ||
|CCProtocol=HTTP | |CCProtocol=HTTP | ||
|Feature=File download, Video screen capture, Firefox cookie theft, | |Feature=File download, Video screen capture, Firefox cookie theft, Backconnect server, | ||
|Status=Actif | |Status=Actif | ||
|Group=Banking, Downloading, | |Group=Banking, Downloading, |
Revision as of 04:26, 17 August 2015
(Botnet) Link to the old Wiki page : [1] / Google search: [2]
Citadel | |
---|---|
Alias | |
Group | Banking, Downloading |
Parent | ZeuS |
Sibling | |
Family | ZeuS (family) |
Relations | Variants: Pobelka Sibling of: |
Target | Microsoft Windows |
Origin | |
Distribution vector | Smoke Bot |
UserAgent | Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.1) |
CCProtocol | HTTP (Centralized) |
Activity | / |
Status | Actif |
Language | |
Programming language | |
Operation/Working group | Operation b54 |
Introduction
A ZeuS variant whose developers claim to engage in a privileged relationship with their customers.
Features