Difference between revisions of "Whitewell"
Jump to navigation
Jump to search
(Created page with "{{Botnet|CCProtocol=Facebook}}") |
|||
| Line 1: | Line 1: | ||
{{Botnet|CCProtocol=Facebook}} | {{Botnet | ||
|Target=Microsoft Windows, | |||
|CCProtocol=Facebook, HTTP, | |||
|Feature=Backdoor, File download, Base64 encoding, | |||
|SymantecDocID=2009-103015-3014-99, | |||
|BeginYear=2009 | |||
|Group=Downloading, | |||
}} | |||
Latest revision as of 11:09, 3 August 2015
(Botnet) Link to the old Wiki page : [1] / Google search: [2]
| Whitewell | |
|---|---|
| Alias | |
| Group | Downloading |
| Parent | |
| Sibling | |
| Family | |
| Relations | Variants: Sibling of: |
| Target | Microsoft Windows |
| Origin | |
| Distribution vector | |
| UserAgent | |
| CCProtocol | Facebook (Centralized), HTTP (Centralized) |
| Activity | 2009 / |
| Status | |
| Language | |
| Programming language | |
| Operation/Working group | |
Introduction
Features
Associated images
Checksums / AV databases
- Symantec: 2009-103015-3014-99
Publications
| Author | Editor | Year | |
|---|---|---|---|
| Trojan.Whitewell: what’s your (bot) Facebook status today? | Andrea Lelli | Symantec | 2009 |