New Mahdi updates, new C2 server: Difference between revisions
m 1 revision imported |
No edit summary |
||
| Line 1: | Line 1: | ||
{{Publication | {{Publication | ||
| | |Botnet=Mahdi | ||
| | |Year=2012 | ||
|Date=29 août 2012 | |Date=29 août 2012 | ||
|Editor=Seculert | |Editor=Seculert | ||
| | |Link=http://blog.seculert.com/2012/08/new-mahdi-updates.html | ||
| | |Author=Seculert | ||
|Abstract=As part of our joint research with Kaspersky Labs, we identified different variants, with different versions of the malware, communicating with four additional servers all located in Canada. While most of the variants communicated with these four servers, a new variant was recently found that communicated with a fifth C&C server located in Canada as well. | |Abstract=As part of our joint research with Kaspersky Labs, we identified different variants, with different versions of the malware, communicating with four additional servers all located in Canada. While most of the variants communicated with these four servers, a new variant was recently found that communicated with a fifth C&C server located in Canada as well. | ||
|NomRevue=Seculert blog | |||
}} | }} | ||
Revision as of 22:30, 30 July 2015
(Publication) Google search: [1]
| New Mahdi updates, new C2 server | |
|---|---|
| Botnet | Mahdi |
| Malware | |
| Botnet/malware group | |
| Exploit kits | |
| Services | |
| Feature | |
| Distribution vector | |
| Target | |
| Origin | |
| Campaign | |
| Operation/Working group | |
| Vulnerability | |
| CCProtocol | |
| Date | 2012 / 29 août 2012 |
| Editor/Conference | Seculert |
| Link | http://blog.seculert.com/2012/08/new-mahdi-updates.html (Archive copy) |
| Author | Seculert |
| Type | |
Abstract
“ As part of our joint research with Kaspersky Labs, we identified different variants, with different versions of the malware, communicating with four additional servers all located in Canada. While most of the variants communicated with these four servers, a new variant was recently found that communicated with a fifth C&C server located in Canada as well.
Bibtex
@misc{Seculert2012BFR1140,
editor = {Seculert},
author = {Seculert},
title = {New Mahdi updates, new C2 server},
date = {Error: Invalid time.},
month = Error: Invalid time.,
year = {2012},
howpublished = {\url{http://blog.seculert.com/2012/08/new-mahdi-updates.html}},
}