]> 2026-10-24T03:37:14+00:00 2012 0 en 2015-07-31T13:19:44Z 2457235.0553704 2012 0 1 plainlist 3 [[Category:Botnets]] [[Begin year::2012]] 2012# QUERYf63daaa3fca4962c5ebea8f29cb26a5f 0 1 plainlist 3 [[Category:Botnets]] [[End year::2012]] 2012# QUERYd2e475867a2c402398dcb38f9d1df3f3 0 1 table 3 [[Category:Publications]] [[Year::2012]] 2012# QUERYec81c44246a4a3794c107d75afbd0dcc 1940 IPs for a BHEK/ULocker server - Nexcess-Net 0 en 1940 IPs for a BHEK/ULocker server - Nexcess-Net A DDoS family affair: Dirt Jumper bot family continues to evolve 0 en A DDoS family affair: Dirt Jumper bot family continues to evolve A chat with NGR Bot 0 en A chat with NGR Bot A new iteration of the TDSS/TDL-4 malware using DGA-based command and control 0 en A new iteration of the TDSS/TDL-4 malware using DGA-based command and control A peek inside the Darkness (Optima) DDoS Bot 0 en A peek inside the Darkness (Optima) DDoS Bot A peek inside the PickPocket botnet 0 en A peek inside the PickPocket botnet A quick update on spambot Kelihos 0 en A quick update on spambot Kelihos A study on botnet detection techniques 0 en A study on botnet detection techniques Acquisition and analysis of volatile memory from Android devices 0 en Acquisition and analysis of volatile memory from Android devices Actually, my name is Duqu - Stuxnet is my middle name 0 en Actually, my name is Duqu - Stuxnet is my middle name An analysis of Dorkbot’s infection vectors (part 2) 0 en An analysis of Dorkbot’s infection vectors (part 2) An analysis of the cross-platform backdoor NetWeirdRC 0 en An analysis of the cross-platform backdoor NetWeirdRC An interesting case of JRE sandbox breach (CVE-2012-0507) 0 en An interesting case of JRE sandbox breach (CVE-2012-0507) An overview of exploit packs 0 en An overview of exploit packs Analyse de Xtreme RAT 0 en Analyse de Xtreme RAT Analyse et poncage du botnet HerpesNet 0 en Analyse et poncage du botnet HerpesNet Analyse statique de Duqu stage 1 0 en Analyse statique de Duqu stage 1 Analyse statique de Duqu stage 2 0 en Analyse statique de Duqu stage 2 Analysis of DarkMegi aka NpcDark 0 en Analysis of DarkMegi aka NpcDark Analysis of TDL4 0 en Analysis of TDL4 Analysis of Ysreef (a variant of Tobfy) 0 en Analysis of Ysreef (a variant of Tobfy) Analysis of a “/0” stealth scan from a botnet 0 en Analysis of a “/0” stealth scan from a botnet Analysis of functions used to encode strings in Flame (GDB script) 0 en Analysis of functions used to encode strings in Flame (GDB script) Analysis of the Finfisher lawful interception malware 0 en Analysis of the Finfisher lawful interception malware Analyzing a new exploit pack 0 en Analyzing a new exploit pack Anaru malware now live and ready to steal 0 en Anaru malware now live and ready to steal Android malware pairs man-in-the-middle with remote-controlled banking trojan 0 en Android malware pairs man-in-the-middle with remote-controlled banking trojan Android trojan used to create simple SMS spam botnet 0 en Android trojan used to create simple SMS spam botnet Android.Bmaster: A million-dollar mobile botnet 0 en Android.Bmaster: A million-dollar mobile botnet Android.Counterclank found in official Android market 0 en Android.Counterclank found in official Android market Anonymous supporters tricked into installing ZeuS trojan 0 en Anonymous supporters tricked into installing ZeuS trojan Análisis del comportamiento de VOlk y sus funcionalidades 0 en Análisis del comportamiento de VOlk y sus funcionalidades Apple releases Java update; includes fix for vulnerability exploited by Flashback malware 0 en Apple releases Java update; includes fix for vulnerability exploited by Flashback malware Apple zombie malware 'NetWeird' rummages for browser and email passwords 0 en Apple zombie malware 'NetWeird' rummages for browser and email passwords Armenian Bredolab creator jailed for computer sabotage 0 en Armenian Bredolab creator jailed for computer sabotage Attackers place Command and Control servers inside enterprise walls 0 en Attackers place Command and Control servers inside enterprise walls AutoIT ransomware 0 en AutoIT ransomware Back to Stuxnet: the missing link 0 en Back to Stuxnet: the missing link Behind the Captcha or Inside Blackhole Exploit Kit 2.0 - Exploit Kit Administration Panel 0 en Behind the Captcha or Inside Blackhole Exploit Kit 2.0 - Exploit Kit Administration Panel Blackhole & Cridex: season 2 episode 1: Intuit spam & SSL traffic analysis 0 en Blackhole & Cridex: season 2 episode 1: Intuit spam & SSL traffic analysis Blackhole Ramnit - samples and analysis 0 en Blackhole Ramnit - samples and analysis Blackhole exploit kit v2 on the rise 0 en Blackhole exploit kit v2 on the rise Blackhole, CVE-2012-0507 and Carberp 0 en Blackhole, CVE-2012-0507 and Carberp Bot shopping with my wife 0 en Bot shopping with my wife BotGrep: finding P2P bots with structured graph analysis 0 en BotGrep: finding P2P bots with structured graph analysis BoteAR: a “social botnet”- What are we talking about 0 en BoteAR: a “social botnet”- What are we talking about Botnet command server hidden in Tor 0 en Botnet command server hidden in Tor Botnet shutdown success story - again: disabling the new Hlux/Kelihos botnet 0 en Botnet shutdown success story - again: disabling the new Hlux/Kelihos botnet Boxer SMS trojan: malware as a global service 0 en Boxer SMS trojan: malware as a global service Bredolab botmaster ‘Birdie’ still at large 0 en Bredolab botmaster ‘Birdie’ still at large CVE-2012-4681 - On its way to Sakura Exploit Kit too 0 en CVE-2012-4681 - On its way to Sakura Exploit Kit too CVE-2012-4681 - Redkit Exploit Kit - I want Porche Turbo 0 en CVE-2012-4681 - Redkit Exploit Kit - I want Porche Turbo CVE-2012-4681 - Связка Sweet Orange 0 en CVE-2012-4681 - Связка Sweet Orange CVE-2012-5076 - Massively adopted - Blackhole update to 2.0.1 0 en CVE-2012-5076 - Massively adopted - Blackhole update to 2.0.1 Carberp gang evolution: CARO 2012 presentation 0 en Carberp gang evolution: CARO 2012 presentation Carberp steals e-cash vouchers from Facebook users 0 en Carberp steals e-cash vouchers from Facebook users Carberp, the renaissance ? 0 en Carberp, the renaissance ? Carberp-in-the-Mobile 0 en Carberp-in-the-Mobile Carberp: it’s not over yet 0 en Carberp: it’s not over yet Case study of the Miner botnet 0 en Case study of the Miner botnet China targets macs used by NGOs 0 en China targets macs used by NGOs Citadel : le fichier de configuration 0 en Citadel : le fichier de configuration Citadel V1.3.5.1: enter the fort’s dungeons 0 en Citadel V1.3.5.1: enter the fort’s dungeons Citadel ZeuS bot 0 en Citadel ZeuS bot Citadel trojan malware analysis 0 en Citadel trojan malware analysis Citadel trojan touts trouble-ticket system 0 en Citadel trojan touts trouble-ticket system Citadel: a cyber-criminal’s ultimate weapon? 0 en Citadel: a cyber-criminal’s ultimate weapon? Confidential documents from Japanese politics stolen by malware 0 en Confidential documents from Japanese politics stolen by malware Cool EK : "Hello my friend..." CVE-2012-5076 0 en Cool EK : "Hello my friend..." CVE-2012-5076 Cool Exploit Kit - A new Browser Exploit Pack on the Battlefield with a "Duqu" like font drop 0 en Cool Exploit Kit - A new Browser Exploit Pack on the Battlefield with a "Duqu" like font drop Cool exploit kit - URL structure 0 en Cool exploit kit - URL structure Covert channels over social networks 0 en Covert channels over social networks Cracking the encrypted C&C protocol of the ZeroAccess botnet 0 en Cracking the encrypted C&C protocol of the ZeroAccess botnet Crisis for Windows sneaks onto virtual machines 0 en Crisis for Windows sneaks onto virtual machines Crypto breakthrough shows Flame was designed by world-class scientists 0 en Crypto breakthrough shows Flame was designed by world-class scientists Crypto experts called on to crack cyberspy tool's encryption 0 en Crypto experts called on to crack cyberspy tool's encryption Cutwail drives spike in malicious HTML attachment spam 0 en Cutwail drives spike in malicious HTML attachment spam Cyber gang seeks botmasters to wage massive wave of trojan attacks against U.S. banks 0 en Cyber gang seeks botmasters to wage massive wave of trojan attacks against U.S. banks DDoS attacks: the Zemra bot 0 en DDoS attacks: the Zemra bot DISCLOSURE: detecting botnet command and control servers through large-scale NetFlow analysis 0 en DISCLOSURE: detecting botnet command and control servers through large-scale NetFlow analysis DNS: a botnet dialect 0 en DNS: a botnet dialect DaRK DDoSseR leads to Gh0st RAT 0 en DaRK DDoSseR leads to Gh0st RAT DarkMegi rootkit - sample (distributed via Blackhole) 0 en DarkMegi rootkit - sample (distributed via Blackhole) Darkmegi: this is not the Rootkit you’re looking for 0 en Darkmegi: this is not the Rootkit you’re looking for De code van Dorifel nader bekeken 0 en De code van Dorifel nader bekeken Digging inside Tinba malware - A walkthrough 0 en Digging inside Tinba malware - A walkthrough Digging into the Nitol DDoS botnet 0 en Digging into the Nitol DDoS botnet Dirt Jumper DDoS bot increasingly popular 0 en Dirt Jumper DDoS bot increasingly popular Disttrack malware overwrites files, infects MBR 0 en Disttrack malware overwrites files, infects MBR Disttrack sabotage malware wipes data at unnamed Middle East energy organization 0 en Disttrack sabotage malware wipes data at unnamed Middle East energy organization Doctor Web a détecté un botnet enrôlant plus de 550 000 Mac 0 en Doctor Web a détecté un botnet enrôlant plus de 550 000 Mac Doctor Web exposes 550 000 strong Mac botnet 0 en Doctor Web exposes 550 000 strong Mac botnet Domain generation algorithms (DGA) in stealthy malware 0 en Domain generation algorithms (DGA) in stealthy malware Dorifel crypto malware paralyzes Dutch companies and public sector 0 en Dorifel crypto malware paralyzes Dutch companies and public sector Dorifel is much bigger than expected and it’s still active and growing! 0 en Dorifel is much bigger than expected and it’s still active and growing! Dorifel virus gereed voor Nederlandse banking phishing 0 en Dorifel virus gereed voor Nederlandse banking phishing Dorifel/Quervar: the support scammer’s secret weapon 0 en Dorifel/Quervar: the support scammer’s secret weapon Dorkbot: conquistando Latinoamérica 0 en Dorkbot: conquistando Latinoamérica Dutch users served Sinowal for lunch 0 en Dutch users served Sinowal for lunch EURO Winlocker 0 en EURO Winlocker Emerging attack vectors - RSA slide deck 0 en Emerging attack vectors - RSA slide deck Etude sur le fonctionnement du Trojan.Matsnu.1 codant les données des utilisateurs 0 en Etude sur le fonctionnement du Trojan.Matsnu.1 codant les données des utilisateurs Exploring the market for stolen passwords 0 en Exploring the market for stolen passwords FAQ on Kelihos.B/Hlux.B sinkholing 0 en FAQ on Kelihos.B/Hlux.B sinkholing Fake FBI Ransomware analysis 0 en Fake FBI Ransomware analysis Fast look at an infection by a Blackhole Exploit Kit 2.0 0 en Fast look at an infection by a Blackhole Exploit Kit 2.0 Festi botnet analysis & investigation 0 en Festi botnet analysis & investigation Flame, Duqu and Stuxnet: in-depth code analysis of mssecmgr.ocx 0 en Flame, Duqu and Stuxnet: in-depth code analysis of mssecmgr.ocx Flame: replication via Windows Update MITM proxy 0 en Flame: replication via Windows Update MITM proxy Flamer analysis: framework reconstruction 0 en Flamer analysis: framework reconstruction Flamer: highly sophisticated and discreet threat targets the Middle East 0 en Flamer: highly sophisticated and discreet threat targets the Middle East Flamer: urgent suicide 0 en Flamer: urgent suicide Flashfake Mac OS X botnet confirmed 0 en Flashfake Mac OS X botnet confirmed Fortiguard: Android/Stiniter.A!tr 0 en Fortiguard: Android/Stiniter.A!tr From Georgia, with love Win32/Georbot 0 en From Georgia, with love Win32/Georbot From Sakura to Reveton via Smoke Bot - or a botnet distribution of Reveton 0 en From Sakura to Reveton via Smoke Bot - or a botnet distribution of Reveton Full analysis of Flame's Command & Control servers 0 en Full analysis of Flame's Command & Control servers Full analysis of Flame's command & control servers 0 en Full analysis of Flame's command & control servers Gangstaservice Winlock Affiliate 0 en Gangstaservice Winlock Affiliate Gauss: Nation-state cyber-surveillance meets banking Trojan 0 en Gauss: Nation-state cyber-surveillance meets banking Trojan Gauss: abnormal distribution 0 en Gauss: abnormal distribution Get gamed and rue the day... 0 en Get gamed and rue the day... Getting more "personal" & deeper into Cridex with parfeit credential stealer infection 0 en Getting more "personal" & deeper into Cridex with parfeit credential stealer infection Gimemo finally targeting USA with Camera Feature too 0 en Gimemo finally targeting USA with Camera Feature too Gimemo wants to play in the big league 0 en Gimemo wants to play in the big league Guys behind Gauss and Flame are the same 0 en Guys behind Gauss and Flame are the same Harvesting data on the Xarvester botmaster 0 en Harvesting data on the Xarvester botmaster HerpesNet botnet 1.7 0 en HerpesNet botnet 1.7 IRC bot for Android 0 en IRC bot for Android Industrial espionage and targeted attacks: understanding the characteristics of an escalating threat 0 en Industrial espionage and targeted attacks: understanding the characteristics of an escalating threat Inside Andromeda Bot v2.06 Webpanel / AKA Gamarue - Botnet Control Panel 0 en Inside Andromeda Bot v2.06 Webpanel / AKA Gamarue - Botnet Control Panel Inside Blackhole Exploits Kit v1.2.4 - Exploit Kit Control Panel 0 en Inside Blackhole Exploits Kit v1.2.4 - Exploit Kit Control Panel Inside Citadel 1.3.4.5 C&C & Builder - Botnet Control Panel 0 en Inside Citadel 1.3.4.5 C&C & Builder - Botnet Control Panel Inside Impact exploit kit 0 en Inside Impact exploit kit Inside Pony 1.7 / Fareit C&C - Botnet Control Panel 0 en Inside Pony 1.7 / Fareit C&C - Botnet Control Panel Inside Smoke Bot - Botnet Control Panel 0 en Inside Smoke Bot - Botnet Control Panel Inside Smoke Bot - botnet control panel 0 en Inside Smoke Bot - botnet control panel Inside Ulocker 0 en Inside Ulocker Inside Upas Kit (1.0.1.1) aka Rombrast C&C - Botnet Control Panel 0 en Inside Upas Kit (1.0.1.1) aka Rombrast C&C - Botnet Control Panel Inside an APT campaign with multiple targets in India and Japan 0 en Inside an APT campaign with multiple targets in India and Japan Inside the Grum botnet 0 en Inside the Grum botnet Inside view of Lyposit aka (for its friends) Lucky LOCKER 0 en Inside view of Lyposit aka (for its friends) Lucky LOCKER Insights into Win32/Bradop 0 en Insights into Win32/Bradop Interconnection of Gauss with Stuxnet, Duqu & Flame 0 en Interconnection of Gauss with Stuxnet, Duqu & Flame Introducing Ponmocup-Finder 0 en Introducing Ponmocup-Finder It’s 2012 and Armageddon has arrived 0 en It’s 2012 and Armageddon has arrived It’s not the end of the world: DarkComet misses by a mile 0 en It’s not the end of the world: DarkComet misses by a mile Java Runtime Environment 1.7 Zero-Day Exploit Delivers Backdoor 0 en Java Runtime Environment 1.7 Zero-Day Exploit Delivers Backdoor Java Zero-Days and the Blackhole Exploit Kit 0 en Java Zero-Days and the Blackhole Exploit Kit Joint strike force against Dorifel 0 en Joint strike force against Dorifel Karagny.L unpack 0 en Karagny.L unpack Kaspersky Lab et Seculert annoncent la récente découverte de « Madi », une nouvelle attaque de cyberespionnage au Moyen‑Orient 0 en Kaspersky Lab et Seculert annoncent la récente découverte de « Madi », une nouvelle attaque de cyberespionnage au Moyen‑Orient Kelihos back in town using Fast Flux 0 en Kelihos back in town using Fast Flux Kelihos is dead. Long live Kelihos 0 en Kelihos is dead. Long live Kelihos Kelihos/Hlux botnet returns with new techniques 0 en Kelihos/Hlux botnet returns with new techniques Kelihos: not alien resurrection, more attack of the clones 0 en Kelihos: not alien resurrection, more attack of the clones King of spam:Festi botnet analysis 0 en King of spam:Festi botnet analysis Koobface botnet master KrotReal back in business, distributes ransomware and promotes BHSEO service/product 0 en Koobface botnet master KrotReal back in business, distributes ransomware and promotes BHSEO service/product Large-scale analysis of malware downloaders 0 en Large-scale analysis of malware downloaders Latest SpyEye botnet active and cheaper 0 en Latest SpyEye botnet active and cheaper Learning stateful models for network honeypots 0 en Learning stateful models for network honeypots Legal implications of countering botnets 0 en Legal implications of countering botnets Library file in certain Android apps connects to C&C servers 0 en Library file in certain Android apps connects to C&C servers Long life to Kelihos! 0 en Long life to Kelihos! MP-DDoser: A rapidly improving DDoS threat 0 en MP-DDoser: A rapidly improving DDoS threat MP-DDoser:Monitoring a rapidly improving DDoS threat 0 en MP-DDoser:Monitoring a rapidly improving DDoS threat MSRT April 2012: Win32/Claretore 0 en MSRT April 2012: Win32/Claretore MSRT June '12 - cleanup on aisle one 0 en MSRT June '12 - cleanup on aisle one MSRT March 2012: breaking bad 0 en MSRT March 2012: breaking bad MSRT November '12 - Weelsof around the world 0 en MSRT November '12 - Weelsof around the world MSRT September '12 - Medfos, hijacking your daily search 0 en MSRT September '12 - Medfos, hijacking your daily search MSRT march: three hioles in one 0 en MSRT march: three hioles in one Mac BackDoor.Wirenet.1 config extractor 0 en Mac BackDoor.Wirenet.1 config extractor Mac Flashback exploiting unpatched Java vulnerability 0 en Mac Flashback exploiting unpatched Java vulnerability Madi is back - New Tricks and a new Command&Control server 0 en Madi is back - New Tricks and a new Command&Control server Mahdi malware finds 150 new targets including U.S. and Germany, gets more evasive 0 en Mahdi malware finds 150 new targets including U.S. and Germany, gets more evasive Major shift in strategy for ZeroAccess rootkit malware, as it shifts to user-mode 0 en Major shift in strategy for ZeroAccess rootkit malware, as it shifts to user-mode Malicious Apache module injects Iframes 0 en Malicious Apache module injects Iframes Malicious Apache module used for content injection: Linux/Chapro.A 0 en Malicious Apache module used for content injection: Linux/Chapro.A Malware 2 - from infection to persistence 0 en Malware 2 - from infection to persistence Malware Memory Analysis - Volatility 0 en Malware Memory Analysis - Volatility Malware Uses Google Go Language 0 en Malware Uses Google Go Language Malware analysis Rannoh/Matsnu 0 en Malware analysis Rannoh/Matsnu Malware analysis tutorial 32: exploration of botnet client 0 en Malware analysis tutorial 32: exploration of botnet client Malware attacking POS systems 0 en Malware attacking POS systems Malware discovered developed with Google's "Go" programming language 0 en Malware discovered developed with Google's "Go" programming language Malware hunting with the Sysinternals tools 0 en Malware hunting with the Sysinternals tools Malware targeting Windows 8 uses Google Docs 0 en Malware targeting Windows 8 uses Google Docs McAfee Labs threat advisory : W32.Pinkslipbot 0 en McAfee Labs threat advisory : W32.Pinkslipbot Measuring botnet populations 0 en Measuring botnet populations Meet CritXPack (Previously Vintage Pack) 0 en Meet CritXPack (Previously Vintage Pack) Meet ProPack Exploit Pack - yes that's a lot of pack 0 en Meet ProPack Exploit Pack - yes that's a lot of pack Meet ‘Flame’, the massive spy malware infiltrating Iranian computers 0 en Meet ‘Flame’, the massive spy malware infiltrating Iranian computers Members of the largest criminal group engaged in online banking fraud are detained 0 en Members of the largest criminal group engaged in online banking fraud are detained Microsoft and financial services industry leaders target cybercriminal operations from ZeuS botnets 0 en Microsoft and financial services industry leaders target cybercriminal operations from ZeuS botnets Microsoft disrupts the emerging Nitol botnet being spread through an unsecure supply chain 0 en Microsoft disrupts the emerging Nitol botnet being spread through an unsecure supply chain MoVP 1.3 Desktops, heaps, and ransomware 0 en MoVP 1.3 Desktops, heaps, and ransomware Monkif botnet hides commands in JPEGs 0 en Monkif botnet hides commands in JPEGs More Flame/Skywiper CNC behavior uncovered 0 en More Flame/Skywiper CNC behavior uncovered More details of the Dorifel servers 0 en More details of the Dorifel servers Multitenancy Botnets thwart threat analysis 0 en Multitenancy Botnets thwart threat analysis NGRBot spreads via chat 0 en NGRBot spreads via chat Necurs Quick Analysis 0 en Necurs Quick Analysis Neosploit gets Java 0-Day 0 en Neosploit gets Java 0-Day Nepalese government websites compromised to serve Zegost RAT 0 en Nepalese government websites compromised to serve Zegost RAT New Apple Mac trojan called OSX/Crisis discovered 0 en New Apple Mac trojan called OSX/Crisis discovered New Chinese exploit pack 0 en New Chinese exploit pack New Duqu sample found in the wild 0 en New Duqu sample found in the wild New Mahdi updates, new C2 server 0 en New Mahdi updates, new C2 server New Thor botnet nearly ready to be sold, price $8,000 0 en New Thor botnet nearly ready to be sold, price $8,000 New Xtreme RAT attacks US, Israel, and other foreign governments 0 en New Xtreme RAT attacks US, Israel, and other foreign governments New ransomware plays its victims an audio file, over and over and over… 0 en New ransomware plays its victims an audio file, over and over and over… New trojan found: Admin.HLP leaks organizations data 0 en New trojan found: Admin.HLP leaks organizations data New virus SMSZombie.A discovered by TrustGo Security Labs 0 en New virus SMSZombie.A discovered by TrustGo Security Labs Newly detected Crisis virus infects Windows, Macs and virtual machines 0 en Newly detected Crisis virus infects Windows, Macs and virtual machines Nitol DDoS botnet discovered in China 0 en Nitol DDoS botnet discovered in China Not just a one-trick PonyDOS 0 en Not just a one-trick PonyDOS Now you Z-(eus) it, now you don’t: ZeuS bots silently upgraded to Citadel 0 en Now you Z-(eus) it, now you don’t: ZeuS bots silently upgraded to Citadel Nuevo botnet contra Mexico: Karn!v0r3x 0 en Nuevo botnet contra Mexico: Karn!v0r3x OSX/Crisis has been used as part of a targeted attack 0 en OSX/Crisis has been used as part of a targeted attack OSX/Flashback - The first malware to infect hundreds of thousands of Apple Mac 0 en OSX/Flashback - The first malware to infect hundreds of thousands of Apple Mac Obama order sped up wave of cyberattacks against Iran 0 en Obama order sped up wave of cyberattacks against Iran Olmasco bootkit: next circle of TDL4 evolution (or not) 0 en Olmasco bootkit: next circle of TDL4 evolution (or not) One bot to rule them all 0 en One bot to rule them all Over 9 million PCs infected - ZeroAccess botnet uncovered 0 en Over 9 million PCs infected - ZeroAccess botnet uncovered P2P botnet Kelihos.B with 100.000 nodes sinkholed 0 en P2P botnet Kelihos.B with 100.000 nodes sinkholed Panda Security uncovers bot-killing malware 0 en Panda Security uncovers bot-killing malware Panel Gendarmerie 0 en Panel Gendarmerie Panel Supern0va et virus gendarmerie 0 en Panel Supern0va et virus gendarmerie Panel Virus Gendarmerie : Ratio 0.36% 0 en Panel Virus Gendarmerie : Ratio 0.36% Part virus, part botnet, spreading fast: Ramnit moves past Facebook passwords 0 en Part virus, part botnet, spreading fast: Ramnit moves past Facebook passwords Playing cops & robbers with banks & browsers 0 en Playing cops & robbers with banks & browsers PlugX: new tool for a not so new campaign 0 en PlugX: new tool for a not so new campaign Police Trojan crosses the Atlantic, now targets USA and Canada 0 en Police Trojan crosses the Atlantic, now targets USA and Canada Ponmocup analysis 0 en Ponmocup analysis Pramro and Sality - two PEs in a pod 0 en Pramro and Sality - two PEs in a pod Proactive detection of security incidents II - Honeypots 0 en Proactive detection of security incidents II - Honeypots Proactive policy measures by Internet service providers against Botnets 0 en Proactive policy measures by Internet service providers against Botnets Probing the Gozi-Prinimalka campaign 0 en Probing the Gozi-Prinimalka campaign Quervar – Induc.C reincarnate 0 en Quervar – Induc.C reincarnate QuickPost: Flame & Volatility 0 en QuickPost: Flame & Volatility Ramnit goes social 0 en Ramnit goes social Ransom.II - UGC payment for USA - Windows Genuine impersonation for DE 0 en Ransom.II - UGC payment for USA - Windows Genuine impersonation for DE Ransomware : Smile you're on camera - Reveton.C new landing pages 0 en Ransomware : Smile you're on camera - Reveton.C new landing pages Ransomware Casier - Sharing Design with Lyposit - Gaelic & Persian ( 0 en Ransomware Casier - Sharing Design with Lyposit - Gaelic & Persian ( Ransomware Fake Microsoft Security Essentials 0 en Ransomware Fake Microsoft Security Essentials Ransomware and Silence Locker control panel 0 en Ransomware and Silence Locker control panel Ransomware crimeware kits 0 en Ransomware crimeware kits Ransomware gets professional, targeting Switzerland, Germany and Austria 0 en Ransomware gets professional, targeting Switzerland, Germany and Austria Ransomware « Trojan.Casier » Panel 0 en Ransomware « Trojan.Casier » Panel Ransomware ‘Holds Up’ victims 0 en Ransomware ‘Holds Up’ victims Ransomware: playing on your fears 0 en Ransomware: playing on your fears Redkit - one account = one color 0 en Redkit - one account = one color Redkit : No more money ! Traffic US, CA, GB, AU 0 en Redkit : No more money ! Traffic US, CA, GB, AU Relentless Zbot and anti-emulations 0 en Relentless Zbot and anti-emulations Reversing malware loaders - The Matsnu-A Case 0 en Reversing malware loaders - The Matsnu-A Case Reversing the wrath of Khan 0 en Reversing the wrath of Khan Reveton += HU, LV, SK, SI, TR (!), RO - So spreading accross Europe with 6 new Design 0 en Reveton += HU, LV, SK, SI, TR (!), RO - So spreading accross Europe with 6 new Design Reveton Autumn Collection += AU,CZ, IE, NO & 17 new design 0 en Reveton Autumn Collection += AU,CZ, IE, NO & 17 new design Reveton can speak now ! 0 en Reveton can speak now ! Reveton.A 0 en Reveton.A Richard Clarke on who was behind the Stuxnet attack 0 en Richard Clarke on who was behind the Stuxnet attack Rmnet.12 created a million Windows computer botnet 0 en Rmnet.12 created a million Windows computer botnet RootSmart Android malware 0 en RootSmart Android malware RootSmart malware utilizes GingerBreak root exploit 0 en RootSmart malware utilizes GingerBreak root exploit Rovnix Reloaded: new step of evolution 0 en Rovnix Reloaded: new step of evolution Rovnix bootkit framework updated 0 en Rovnix bootkit framework updated Rovnix.D: the code injection story 0 en Rovnix.D: the code injection story SIM-ple: mobile handsets are weak link in latest online banking fraud scheme 0 en SIM-ple: mobile handsets are weak link in latest online banking fraud scheme SIRv12 0 en SIRv12 SIRv12: the obstinacy of Conficker 0 en SIRv12: the obstinacy of Conficker SKyWIper: A complex malware for targeted attacks 0 en SKyWIper: A complex malware for targeted attacks Saudi Aramco hit by computer virus 0 en Saudi Aramco hit by computer virus Say hello to Tinba: world’s smallest trojan-banker 0 en Say hello to Tinba: world’s smallest trojan-banker Scareware locks down computer due to child porn and terrorism 0 en Scareware locks down computer due to child porn and terrorism Security Response Android.Counterclank 0 en Security Response Android.Counterclank Security alert: SpamSoldier 0 en Security alert: SpamSoldier Security alert: new Android malware - TigerBot - identified in alternative markets 0 en Security alert: new Android malware - TigerBot - identified in alternative markets Security alert: new TGLoader Android malware utilizes the exploid root exploit 0 en Security alert: new TGLoader Android malware utilizes the exploid root exploit Security alert: new variants of Legacy Native (LeNa) identified 0 en Security alert: new variants of Legacy Native (LeNa) identified Shamoon the Wiper in details 0 en Shamoon the Wiper in details Shamoon the Wiper: further details (Part II) 0 en Shamoon the Wiper: further details (Part II) Shamoon the wiper - copycats at work 0 en Shamoon the wiper - copycats at work Shylock financial malware back 'with a vengeance' 0 en Shylock financial malware back 'with a vengeance' Sinowal analysis (Windows 7, 32-bit) 0 en Sinowal analysis (Windows 7, 32-bit) Sinowal: MBR rootkit never dies! (and it always brings some new clever features) 0 en Sinowal: MBR rootkit never dies! (and it always brings some new clever features) Skynet, a Tor-powered botnet straight from Reddit 0 en Skynet, a Tor-powered botnet straight from Reddit Smartcard vulnerabilities in modern banking malware 0 en Smartcard vulnerabilities in modern banking malware Sopelka Botnet: three banking trojans and one banking panel 0 en Sopelka Botnet: three banking trojans and one banking panel Spam botnets: The fall of Grum and the rise of Festi 0 en Spam botnets: The fall of Grum and the rise of Festi SpyEye being kicked to the curb by its customers? 0 en SpyEye being kicked to the curb by its customers? Stamp EK (aka SofosFO) now showing "Blackhole 2.0 Like" landing pages 0 en Stamp EK (aka SofosFO) now showing "Blackhole 2.0 Like" landing pages Static analysis of Dalvik bytecode and reflection in Android 0 en Static analysis of Dalvik bytecode and reflection in Android Study of malware obfuscation techniques 0 en Study of malware obfuscation techniques Symantec/Android.Ackposts 0 en Symantec/Android.Ackposts Symantec/Android.Maistealer 0 en Symantec/Android.Maistealer Symantec/Backdoor.Arcomrat 0 en Symantec/Backdoor.Arcomrat TDI - a new element in old TDSS story 0 en TDI - a new element in old TDSS story TDL4 reloaded: Purple Haze all in my brain 0 en TDL4 reloaded: Purple Haze all in my brain TDSS botnet: full disclosure 0 en TDSS botnet: full disclosure Tales from Crisis, Chapter 1: The dropper’s box of tricks 0 en Tales from Crisis, Chapter 1: The dropper’s box of tricks Tales from Crisis, Chapter 2: Backdoor’s first steps 0 en Tales from Crisis, Chapter 2: Backdoor’s first steps Tales from Crisis, Chapter 3: The Italian rootkit job 0 en Tales from Crisis, Chapter 3: The Italian rootkit job Tales from Crisis, Chapter 4: a ghost in the network 0 en Tales from Crisis, Chapter 4: a ghost in the network Targeted destructive malware explained: Troj/Mdrop-ELD 0 en Targeted destructive malware explained: Troj/Mdrop-ELD Tatanga attack exposes chipTAN weaknesses 0 en Tatanga attack exposes chipTAN weaknesses The ACCDFISA malware family – Ransomware targeting Windows servers 0 en The ACCDFISA malware family – Ransomware targeting Windows servers The ACCDFISA malware family – Ransomware targetting Windows servers 0 en The ACCDFISA malware family – Ransomware targetting Windows servers The Cridex trojan targets 137 financial organizations in one go 0 en The Cridex trojan targets 137 financial organizations in one go The Dorkbot rises 0 en The Dorkbot rises The Elderwood project (infographic) 0 en The Elderwood project (infographic) The Flame: questions and answers 0 en The Flame: questions and answers The Madi campaign - Part II 0 en The Madi campaign - Part II The Mirage campaign 0 en The Mirage campaign The Pobelka botnet - a command and control case study 0 en The Pobelka botnet - a command and control case study The ZeroAccess botnet: mining and fraud for massive financial gain 0 en The ZeroAccess botnet: mining and fraud for massive financial gain The ZeroAccess rootkit 0 en The ZeroAccess rootkit The first trojan in history to steal Linux and Mac OS X passwords 0 en The first trojan in history to steal Linux and Mac OS X passwords The lifecycle of peer-to-peer (Gameover) ZeuS 0 en The lifecycle of peer-to-peer (Gameover) ZeuS The mystery of Duqu framework solved 0 en The mystery of Duqu framework solved The mystery of Duqu: part ten 0 en The mystery of Duqu: part ten The mystery of the Duqu framework 0 en The mystery of the Duqu framework The where and why of Hlux 0 en The where and why of Hlux The ‘Madi’ infostealers - a detailed analysis 0 en The ‘Madi’ infostealers - a detailed analysis The “Hikit” rootkit: advanced and persistent attack techniques (part 1) 0 en The “Hikit” rootkit: advanced and persistent attack techniques (part 1) The “Hikit” rootkit: advanced and persistent attack techniques (part 2) 0 en The “Hikit” rootkit: advanced and persistent attack techniques (part 2) Tilon-son of Silon 0 en Tilon-son of Silon Top 50 bad hosts & networks 2011 Q4 0 en Top 50 bad hosts & networks 2011 Q4 Tracking down the author of the PlugX RAT 0 en Tracking down the author of the PlugX RAT Trojan moves its configuration to Twitter, LinkedIn, MSDN and Baidu 0 en Trojan moves its configuration to Twitter, LinkedIn, MSDN and Baidu Trojan on the loose: an in-depth analysis of police trojan 0 en Trojan on the loose: an in-depth analysis of police trojan Trojan.Prinimalka: bits and pieces 0 en Trojan.Prinimalka: bits and pieces Trojan.Taidoor takes aim at policy think tanks 0 en Trojan.Taidoor takes aim at policy think tanks Trojan.Tatanarg.B careful! 0 en Trojan.Tatanarg.B careful! Trojan.ZeroAccess infection analysis 0 en Trojan.ZeroAccess infection analysis Unexpected reboot: Necurs 0 en Unexpected reboot: Necurs Unveiling the network criminal infrastructure of TDSS/TDL4 - DGAv14: a case study on a new TDSS/TDL4 variant 0 en Unveiling the network criminal infrastructure of TDSS/TDL4 - DGAv14: a case study on a new TDSS/TDL4 variant Upas Kit (aka Rombrast) integrates webinjects 0 en Upas Kit (aka Rombrast) integrates webinjects Update to Citadel : 1.3.5.1 Rain Edition. 0 en Update to Citadel : 1.3.5.1 Rain Edition. Update to Citadel : v.1.3.4.5 0 en Update to Citadel : v.1.3.4.5 Urausy has big plan for Europe - Targeting 3 new countries among which Norway ! 0 en Urausy has big plan for Europe - Targeting 3 new countries among which Norway ! Urausy improving its localization - A (the\?) Gaelic Ransomware with Interpol impersonation as default landing 0 en Urausy improving its localization - A (the\?) Gaelic Ransomware with Interpol impersonation as default landing Virus Gendarmerie : variante Office Centrale de Luttre contre la criminalité – controle informationnel 0 en Virus Gendarmerie : variante Office Centrale de Luttre contre la criminalité – controle informationnel W32.Changeup: how the worm was created 0 en W32.Changeup: how the worm was created W32.Flamer: spreading mechanism tricks and exploits 0 en W32.Flamer: spreading mechanism tricks and exploits W32.Shadesrat (Blackshades) author arrested 0 en W32.Shadesrat (Blackshades) author arrested W32.Tinba (Tinybanker) The turkish incident 0 en W32.Tinba (Tinybanker) The turkish incident Weelsof use SSL C&C 0 en Weelsof use SSL C&C What was that Wiper thing? 0 en What was that Wiper thing? What’s the buzz with Bafruz 0 en What’s the buzz with Bafruz Who's behind the Koobface botnet? - An OSINT analysis 0 en Who's behind the Koobface botnet? - An OSINT analysis Who's behind the world's largest spam botnet? 0 en Who's behind the world's largest spam botnet? Win32/Gataka - or should we say Zutick? 0 en Win32/Gataka - or should we say Zutick? Win32/Gataka banking Trojan - Detailed analysis 0 en Win32/Gataka banking Trojan - Detailed analysis Win32/Gataka: a banking Trojan ready to take off 0 en Win32/Gataka: a banking Trojan ready to take off Win32/Spy.Ranbyus modifying Java code in RBS Ukraine systems 0 en Win32/Spy.Ranbyus modifying Java code in RBS Ukraine systems Winlock affiliate 0 en Winlock affiliate XPAJ: reversing a Windows x64 bootkit 0 en XPAJ: reversing a Windows x64 bootkit You dirty RAT! Part 1 – DarkComet 0 en You dirty RAT! Part 1 – DarkComet You dirty RAT! part 2 – BlackShades NET 0 en You dirty RAT! part 2 – BlackShades NET ZACCESS/SIREFEF arrives with new infection technique 0 en ZACCESS/SIREFEF arrives with new infection technique ZeroAccess - new steps in evolution 0 en ZeroAccess - new steps in evolution ZeroAccess's way of self-deletion 0 en ZeroAccess's way of self-deletion ZeroAccess: code injection chronicles 0 en ZeroAccess: code injection chronicles ZeuS Gameover overview 0 en ZeuS Gameover overview ZeuS ransomware feature: win unlock 0 en ZeuS ransomware feature: win unlock ZeuS v2 Malware Analysis - Part II 0 en ZeuS v2 Malware Analysis - Part II ZeuS – P2P+DGA variant – mapping out and understanding the threat 0 en ZeuS – P2P+DGA variant – mapping out and understanding the threat ZeuS: me talk pretty Finnish one day 0 en ZeuS: me talk pretty Finnish one day ZeuSbot/Spyeye P2P updated, fortifying the botnet 0 en ZeuSbot/Spyeye P2P updated, fortifying the botnet Новый сэмпл Pandora DDoS Bot 0 en Новый сэмпл Pandora DDoS Bot ‘Dexter’ virus targets point-of-sale terminals 0 en ‘Dexter’ virus targets point-of-sale terminals ‘Project Blitzkrieg’ promises more aggressive cyberheists against U.S. banks 0 en ‘Project Blitzkrieg’ promises more aggressive cyberheists against U.S. banks Ackposts 0 en Ackposts Admin.HLP 0 en Admin.HLP Adneukine 0 en Adneukine Alina 0 en Alina Arcom 0 en Arcom Carna 0 en Carna Casier 0 en Casier Chameleon 0 en Chameleon ChePro 0 en ChePro Chidol 0 en Chidol DistTrack 0 en DistTrack Dorifel 0 en Dorifel Epubb 0 en Epubb Jabberbot 0 en Jabberbot KaiXin 0 en KaiXin Lyposit 0 en Lyposit Maistealer 0 en Maistealer Makadocs 0 en Makadocs Malex 0 en Malex Medfos 0 en Medfos Mlano 0 en Mlano NetWeird 0 en NetWeird Nitol 0 en Nitol NjRAT 0 en NjRAT PTA 0 en PTA PokerAgent 0 en PokerAgent Rannoh 0 en Rannoh Ransom.HY 0 en Ransom.HY Regin 0 en Regin SMSZombie 0 en SMSZombie Skynet 0 en Skynet Studma 0 en Studma Supern0va 0 en Supern0va Tilon 0 en Tilon Urausy 0 en Urausy Vicas 0 en Vicas Weelsof 0 en Weelsof Wiper 0 en Wiper Wirenet 0 en Wirenet Zemra 0 en Zemra Fivetoone 0 en Fivetoone Flashback 0 en Flashback Grum 0 en Grum HerpesNet 0 en HerpesNet Year 102 en Year Begin year 102 en Begin year End year 102 en End year