Pobelka: Difference between revisions
m 1 revision imported |
m Text replacement - "=Unknown" to "=" |
||
| Line 1: | Line 1: | ||
{{Botnet | {{Botnet | ||
|Introduction=[[Pobelka]] is reported an instance of the [[variant of::Citadel]] botnet. A report by Fox-IT claims that the same campaign was previously using [[variant of::SpyEye]]. | |Introduction=[[Pobelka]] is reported an instance of the [[variant of::Citadel]] botnet. A report by Fox-IT claims that the same campaign was previously using [[variant of::SpyEye]]. | ||
|UserAgent= | |UserAgent= | ||
|CCProtocol= | |CCProtocol= | ||
|Target= | |Target= | ||
|Status= | |Status= | ||
|BeginYear=2011 | |BeginYear=2011 | ||
|EndYear= | |EndYear= | ||
|Group=Banking | |Group=Banking | ||
|Groupe2=Stealing | |Groupe2=Stealing | ||
Revision as of 13:46, 8 August 2015
(Botnet) Link to the old Wiki page : [1] / Google search: [2]
| Pobelka | |
|---|---|
| Alias | |
| Group | Banking |
| Parent | |
| Sibling | |
| Family | |
| Relations | Variants: Sibling of: |
| Target | |
| Origin | |
| Distribution vector | |
| UserAgent | |
| CCProtocol | |
| Activity | 2011 / |
| Status | |
| Language | |
| Programming language | |
| Operation/Working group | |
Introduction
Pobelka is reported an instance of the Citadel botnet. A report by Fox-IT claims that the same campaign was previously using SpyEye.
Features
Associated images
Checksums / AV databases
Publications
| Author | Editor | Year | |
|---|---|---|---|
| Demystifying Pobelka | Michael Sandee | Fox-IT | 2013 |
| The Pobelka botnet - a command and control case study | Rickey Gevers | Digital Investigation | 2012 |