Jump to content

The Andromeda/Gamarue botnet is on the rise again: Difference between revisions

From Botnets.fr
The AndromedaThe Andromeda/Gamarue botnet is on the rise again
Created page with "{{Publication |Botnet=Andromeda, Gamarue, |Editor=GData }}"
 
No edit summary
Line 1: Line 1:
{{Publication
{{Publication
|Botnet=Andromeda, Gamarue,
|Botnet=Andromeda, Gamarue,
|Vector=Spam,
|Programming language=.NET,
|Editor=GData
|Editor=GData
|Link=https://blog.gdatasoftware.com/blog/article/the-andromedagamarue-botnet-is-on-the-rise-again.html
|Author=Paul Rascagnères,
|Type=Blogpost
|Abstract=Attacks carried out with documents pepped up with macros seem to become in vogue again. G DATA’s security experts have analyzed several cases within the last weeks, in which active content in documents triggers an infection. The experts want to explain two different approaches for the same current goal: infect the user with malware that enlists the machine as zombie PC in the Andromeda/Gamarue botnet.
}}
}}

Revision as of 12:52, 18 July 2015

(Publication) Google search: [1]

The Andromeda/Gamarue botnet is on the rise again
Botnet Andromeda, Gamarue
Malware
Botnet/malware group
Exploit kits
Services
Feature
Distribution vector Spam
Target
Origin
Campaign
Operation/Working group
Vulnerability
CCProtocol
Date /
Editor/Conference GData
Link https://blog.gdatasoftware.com/blog/article/the-andromedagamarue-botnet-is-on-the-rise-again.html (Archive copy)
Author Paul Rascagnères
Type Blogpost

Abstract

“ Attacks carried out with documents pepped up with macros seem to become in vogue again. G DATA’s security experts have analyzed several cases within the last weeks, in which active content in documents triggers an infection. The experts want to explain two different approaches for the same current goal: infect the user with malware that enlists the machine as zombie PC in the Andromeda/Gamarue botnet.

Bibtex

 @misc{RascagnèresBFR1637,
   editor = {GData},
   author = {Paul Rascagnères},
   title = {The Andromeda/Gamarue botnet is on the rise again},
   date = {24},
   month = Oct,
   year = {},
   howpublished = {\url{https://blog.gdatasoftware.com/blog/article/the-andromedagamarue-botnet-is-on-the-rise-again.html}},
 }