2012

(Year/Month)

Botnets

• Starting in 2012: Ackposts, Admin.HLP, Adneukine, Alina, Arcom, Carna, Casier, Chameleon, ChePro, Chidol, DistTrack, Dorifel, Epubb, Jabberbot, Lyposit, Maistealer, Makadocs, Malex, Medfos, Mlano, NetWeird, Nitol, NjRAT, PTA, PokerAgent, Rannoh, Ransom.HY, Regin, SMSZombie, Skynet, Studma, Supern0va, Tilon, Urausy, Vicas, Weelsof, Wiper, Wirenet, Zemra
• Ending in 2012: Fivetoone, Flashback, Grum, HerpesNet

Publications

	Author	Editor	Botnet	Campaign
1940 IPs for a BHEK/ULocker server - Nexcess-Net	Kafeine		ULocker
A DDoS family affair: Dirt Jumper bot family continues to evolve	Curt Wilson	Arbor SERT	Dirt Jumper Pandora Russkill Dirt Jumper September Simple Di BoTNet
A chat with NGR Bot	Chong Rong Hwa	InfoSec Institude	Dorkbot
A new iteration of the TDSS/TDL-4 malware using DGA-based command and control		Damballa	TDL-4 DGAv14 TDSS
A peek inside the Darkness (Optima) DDoS Bot	Dancho Danchev	Webroot	Darkness
A peek inside the PickPocket botnet	Dancho Danchev	Webroot	PickPocket
A quick update on spambot Kelihos		Abuse.ch	Kelihos Storm Waledac
A study on botnet detection techniques	Haritha.S. Nair Vinodh Ewards S E	International Journal of Scientific and Research Publications
Acquisition and analysis of volatile memory from Android devices	Joe Sylve Andrew Case Lodovico Marziale Golden G. Richard	Elsevier
Actually, my name is Duqu - Stuxnet is my middle name	Sergei Shevchenko	BAE Systems stratsec	Duqu Stuxnet
An analysis of Dorkbot’s infection vectors (part 2)	Horea Coroiu	Microsoft Malware Protection Centre	Dorkbot
An analysis of the cross-platform backdoor NetWeirdRC	Lysa Myers	Intego	NetWeird
An interesting case of JRE sandbox breach (CVE-2012-0507)	Jeong Wook (Matt) Oh Chun Feng	Microsoft
An overview of exploit packs	Mila Parkour	Contagio
Analyse de Xtreme RAT	RootBSD	Malware.lu	Xtreme RAT
Analyse et poncage du botnet HerpesNet	RootBSD	Malware.lu	HerpesNet
Analyse statique de Duqu stage 1	Paul Rascagnères	Malware.lu	Duqu
Analyse statique de Duqu stage 2	RootBSD	Malware.lu	Duqu
Analysis of DarkMegi aka NpcDark	Kimberly	StopMalvertising	DarkMegi
Analysis of TDL4	Sergei Shevchenko	BAE Systems	TDL-4
Analysis of Ysreef (a variant of Tobfy)	Hugo Caron	Malware.lu	Ysreef
Analysis of a “/0” stealth scan from a botnet	Alberto Dainotti Alistair King Kimberly Claffy Ferdinando Papale Antonio Pescapé		Sality
Analysis of functions used to encode strings in Flame (GDB script)	RootBSD	Malware.lu	Flame
Analysis of the Finfisher lawful interception malware	Claudio Guarnieri	Rapid7	Finfisher
Analyzing a new exploit pack	Darryl	Kahu Security
Anaru malware now live and ready to steal	Joji Hamada	Symantec	Maistealer
Android malware pairs man-in-the-middle with remote-controlled banking trojan	Carlos Castillo	McAfee Labs	FakeToken
Android trojan used to create simple SMS spam botnet	Andrew Conway	Cloudmark	SpamSoldier
Android.Bmaster: A million-dollar mobile botnet	Cathal Mullaney	Symantec	Bmaster
Android.Counterclank found in official Android market	Irfan Asrar	Symantec
Anonymous supporters tricked into installing ZeuS trojan		Symantec	ZeuS
Análisis del comportamiento de VOlk y sus funcionalidades	Fernando Catoira	ESET	VOlk
Apple releases Java update; includes fix for vulnerability exploited by Flashback malware		Intego	Flashback
Apple zombie malware 'NetWeird' rummages for browser and email passwords	Paul Ducklin	Sophos Labs	NetWeird
Armenian Bredolab creator jailed for computer sabotage	Christopher Brook	Kaspersky lab	Bredolab
Attackers place Command and Control servers inside enterprise walls	Brian Prince	Security Week	Waledac
AutoIT ransomware	Hugo Caron	Malware.lu	Ransom.II
Back to Stuxnet: the missing link	Aleks	Kaspersky lab	Flame Stuxnet
Behind the Captcha or Inside Blackhole Exploit Kit 2.0 - Exploit Kit Administration Panel	Kafeine
Blackhole & Cridex: season 2 episode 1: Intuit spam & SSL traffic analysis	André M. DiMino		Cridex
Blackhole Ramnit - samples and analysis	Mila Parkour
Blackhole exploit kit v2 on the rise	Pradeep Kulkarni	Zscaler
Blackhole, CVE-2012-0507 and Carberp	David Harley Aleksandr Matrosov	ESET	Carberp
Bot shopping with my wife	Luis Corrons	Panda Labs	Ainslot
BotGrep: finding P2P bots with structured graph analysis	Shishir Nagaraja Prateek Mittal Chi-yao Hong Matthew Caesar Nikita Borisov
BoteAR: a “social botnet”- What are we talking about	Jorge Mieres	Kaspersky lab	BoteAR
Botnet command server hidden in Tor	TS	GData	Skynet
Botnet shutdown success story - again: disabling the new Hlux/Kelihos botnet	Stefan Ortloff	Kaspersky lab	Kelihos
Boxer SMS trojan: malware as a global service	Pablo Ramos	ESET	Boxer
Bredolab botmaster ‘Birdie’ still at large	Brian Krebs	Krebs on Security	Bredolab
... further results