Koobface

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Koobface
Alias
Group	Stealing
Parent
Sibling
Family
Relations	Variants: Sibling of: Parent of: Distribution of: Campaigns:
Target	Microsoft Windows
Origin
Distribution vector	SDBot
UserAgent	Unknown
CCProtocol	P2P (Decentralized)
Activity	2008 /
Status	Unknown
Language
Programming language
Operation/Working group

Features

• DNS configuration modification

• Search results manipulation

• CAPTCHA display to solve

• Web server

• Facebook vector

• Cookie theft

• Software ID theft

• Browser password theft

• Email password theft

• FTP client password theft

• IM password theft

Publications

	Author	Editor	Year
Koobface botnet master KrotReal back in business, distributes ransomware and promotes BHSEO service/product	Dancho Danchev	Dancho Danchev	2012
Koobface, un écosystème cybercriminel ou le conte des Mille et une nuits ?	Eric Freyssinet	Eric Freyssinet	2010
On botnets that use DNS for command and control	Felix C. Freiling Christian J. Dietrich Christian Rossow Herbert Bos Maarten van Steen Norbert Pohlmann	Institute for Internet Security University of Applied Sciences Gelsenkirchen Gelsenkirchen, Germany	2011
The real face of Koobface: the largest web 2.0 botnet explained	Jonell Baltazar Joey Costoya Ryan Flores	Trend Micro
Who's behind the Koobface botnet? - An OSINT analysis	Dancho Danchev		2012