Travnet trojan could be part of APT campaign
Appearance
(Publication) Google search: [1]
| Travnet trojan could be part of APT campaign | |
|---|---|
| Botnet | Travnet |
| Malware | |
| Botnet/malware group | |
| Exploit kits | |
| Services | |
| Feature | |
| Distribution vector | |
| Target | |
| Origin | |
| Campaign | |
| Operation/Working group | |
| Vulnerability | |
| CCProtocol | |
| Date | 2013 / 2013-03-14 |
| Editor/Conference | McAfee |
| Link | http://blogs.mcafee.com/mcafee-labs/travnet-trojan-could-be-part-of-apt-campaign (Archive copy) |
| Author | Vikas Taneja |
| Type | Blogpost |
Abstract
“ Attackers use all kinds of attack vectors to steal sensitive information from their targets. Their efforts are not limited to only zero-day vulnerabilities. Malware authors often exploit old vulnerabilities because a large number of organizations still use old vulnerable software. The Trojan Travnet, which steals information, is a classic example of malware that takes advantage of unpatched software. We have recently observed malicious Travnet RTF and Excel documents that exploit old vulnerabilities, such as CVE-2010-3333, in Microsoft Office. During our investigation we identified some samples associated with this campaign that have been active since 2009.
Bibtex
@misc{Taneja2013BFR1322,
editor = {McAfee},
author = {Vikas Taneja},
title = {Travnet trojan could be part of APT campaign},
date = {14},
month = Mar,
year = {2013},
howpublished = {\url{http://blogs.mcafee.com/mcafee-labs/travnet-trojan-could-be-part-of-apt-campaign}},
}