Tobfy: Difference between revisions
Appearance
m 1 revision imported |
m Text replacement - "=Unknown" to "=" |
||
| Line 29: | Line 29: | ||
e7e54e5689d56b7080d36813ff3a0f91 14/10/12 | e7e54e5689d56b7080d36813ff3a0f91 14/10/12 | ||
a3d8e17f2b046317c86c597038c4e00c 09/11/12 | a3d8e17f2b046317c86c597038c4e00c 09/11/12 | ||
|UserAgent= | |UserAgent= | ||
|CCProtocol= | |CCProtocol= | ||
|Target= | |Target= | ||
|Status= | |Status= | ||
|BeginYear= | |BeginYear= | ||
|EndYear= | |EndYear= | ||
|Group=Police lock | |Group=Police lock | ||
|Alias=TROJ_RANSOM.CMY | |Alias=TROJ_RANSOM.CMY | ||
Latest revision as of 13:50, 8 August 2015
(Botnet) Link to the old Wiki page : [1] / Google search: [2]
| Tobfy | |
|---|---|
| Alias | Reveton.D |
| Group | Police lock |
| Parent | |
| Sibling | |
| Family | |
| Relations | Variants: Sibling of: |
| Target | |
| Origin | |
| Distribution vector | |
| UserAgent | |
| CCProtocol | |
| Activity | / |
| Status | |
| Language | |
| Programming language | |
| Operation/Working group | |
Introduction
Note: Maybe 3 differents actors here
Features
Associated images
-
Tobfy AT (06&08-2012)
-
Tobfy AT (06-2012)
-
Tobfy AT (10-2012)
-
Tobfy BE (08-2012) May Weelsof design
-
Tobfy BE (10-2012)
-
Tobfy CA (10-2012)
-
Tobfy CH (06&08-2012) May Gimemo Design
-
Tobfy CH (10-2012)
-
Tobfy DE (06&08-2012)
-
Tobfy DE (06-2012)
-
Tobfy DE (10-2012)
-
Tobfy Default (06-2012)
-
Tobfy Default (10-2012)
-
Tobfy ES (06&08-2012)
-
Tobfy ES (10-2012)
-
Tobfy FI (08-2012) May Weelsof Design
-
Tobfy FI (10-2012)
-
Tobfy FR (06&08-2012)
-
Tobfy FR (06-2012)
-
Tobfy FR (10-2012)
-
Tobfy GR (08-2012) May Weelsof Design
-
Tobfy IT (06&08-2012)
-
Tobfy IT (10-2012)
-
Tobfy NL (06&08-2012)
-
Tobfy NL (10-2012)
-
Tobfy PL (08-2012) May Weelsof Design
-
Tobfy PL (10-2012)
-
Tobfy PT (06&08-2012)
-
Tobfy SE (10-2012)
-
Tobfy UK (06&08-2012)
-
Tobfy UK (06-2012)
-
Tobfy US (08-2012)
-
Tobfy US (10-2012)
Checksums / AV databases
Publications
Copies d'écran
2012/10
Note : We are not 100% sure this is indeed Tobfy. We put this here based on Microsoft Signature but some indicators make us think it could be Ysreef or something new.