Urausy improving its localization - A (the\?) Gaelic Ransomware with Interpol impersonation as default landing: Difference between revisions
Appearance
m 1 revision imported |
m Text replacement - " malware.dontneedcoffee.com" to "" |
||
| Line 5: | Line 5: | ||
|Licence= | |Licence= | ||
|Video= | |Video= | ||
|Link=http://malware.dontneedcoffee.com/2012/09/UrausyGaelicInterpol.html | |Link=http://malware.dontneedcoffee.com/2012/09/UrausyGaelicInterpol.html | ||
|Author=Kafeine, | |Author=Kafeine, | ||
|NomRevue=Malware don't need Coffee | |NomRevue=Malware don't need Coffee | ||
Latest revision as of 17:00, 7 February 2015
(Publication) Google search: [1]
| Urausy improving its localization - A (the\?) Gaelic Ransomware with Interpol impersonation as default landing | |
|---|---|
| Botnet | Urausy |
| Malware | |
| Botnet/malware group | |
| Exploit kits | |
| Services | |
| Feature | |
| Distribution vector | |
| Target | |
| Origin | |
| Campaign | |
| Operation/Working group | |
| Vulnerability | |
| CCProtocol | |
| Date | 2012 / 2012-09-15 |
| Editor/Conference | Blogspot |
| Link | http://malware.dontneedcoffee.com/2012/09/UrausyGaelicInterpol.html (Archive copy) |
| Author | Kafeine |
| Type | |
Abstract
“ Urausy first appear at the end of July. It was just another Reveton "Me too" with a yellow square filled with a # instead of the "Camera" and targetting few countries : DE, ES, FR, UK, US (PT? see at the end)
Based on what i was able to see of the distribution, I had the feeling at that time, that it was a Reveton distributor trying to run his own business.
Bibtex
@misc{Kafeine2012BFR1225,
editor = {Blogspot},
author = {Kafeine},
title = {Urausy improving its localization - A (the\?) Gaelic Ransomware with Interpol impersonation as default landing},
date = {15},
month = Sep,
year = {2012},
howpublished = {\url{http://malware.dontneedcoffee.com/2012/09/UrausyGaelicInterpol.html}},
}