]> 2026-10-23T21:16:01+00:00 2013 0 en 2015-07-31T13:20:46Z 2457235.056088 2013 0 1 plainlist 3 [[Category:Botnets]] [[Begin year::2013]] 2013# QUERY8ead0a0112a23bab7003f4ea8cab4791 0 1 plainlist 3 [[Category:Botnets]] [[End year::2013]] 2013# QUERYea05b1774a35131f6e35cca3ac2204e9 0 1 table 3 [[Category:Publications]] [[Year::2013]] 2013# QUERY47f99f4e5c16b96cba6026baa6527ad6 "NetTraveler is Running!" - Red Star APT attacks compromise high-profile victims 0 en "NetTraveler is Running!" - Red Star APT attacks compromise high-profile victims "njRAT" Uncovered 0 en "njRAT" Uncovered APT1: technical backstage 0 en APT1: technical backstage Adobe Flash Player 0-day and HackingTeam's Remote Control System 0 en Adobe Flash Player 0-day and HackingTeam's Remote Control System Alina: casting a shadow on POS 0 en Alina: casting a shadow on POS Alina: following the shadow part 1 0 en Alina: following the shadow part 1 Alina: following the shadow part 2 0 en Alina: following the shadow part 2 An encounter with trojan Nap 0 en An encounter with trojan Nap An overview of messaging botnets 0 en An overview of messaging botnets Analyse of the sample cdorked.A 0 en Analyse of the sample cdorked.A Analysis of a PlugX malware variant used for targeted attacks 0 en Analysis of a PlugX malware variant used for targeted attacks Analysis of a stage 3 Miniduke malware sample 0 en Analysis of a stage 3 Miniduke malware sample Analysis of the malware of Red October - Part 1 0 en Analysis of the malware of Red October - Part 1 Analysis of the malware of Red October - Part 2 0 en Analysis of the malware of Red October - Part 2 Apache binary backdoors on Cpanel-based servers 0 en Apache binary backdoors on Cpanel-based servers Attention! All data on your hardrive is encrypted 0 en Attention! All data on your hardrive is encrypted Avatar rootkit: the continuing saga 0 en Avatar rootkit: the continuing saga Backdoor uses Evernote as command and control server 0 en Backdoor uses Evernote as command and control server Black Dragon: "... and all will burn beneath the shadow of my wings" 0 en Black Dragon: "... and all will burn beneath the shadow of my wings" Blackhole and Cool Exploit kits nearly extinct 0 en Blackhole and Cool Exploit kits nearly extinct Bot herders build newer versions of previous botnet Waledac 0 en Bot herders build newer versions of previous botnet Waledac CVE-2013-1493 (jre17u15 - jre16u41) integrating exploit kits 0 en CVE-2013-1493 (jre17u15 - jre16u41) integrating exploit kits CVE-2013-2465/CVE-2013-2471/CVE-2013-2463 integrating Exploit Kits -- jre7u21 CVE- jre6u45 and earlier 0 en CVE-2013-2465/CVE-2013-2471/CVE-2013-2463 integrating Exploit Kits -- jre7u21 CVE- jre6u45 and earlier Carberp-based trojan attacking SAP 0 en Carberp-based trojan attacking SAP Chameleon botnet grabbed $6m A MONTH from online ad-slingers 0 en Chameleon botnet grabbed $6m A MONTH from online ad-slingers Citadel plitfi botnet report 0 en Citadel plitfi botnet report Collateral damage: Microsoft hits security researchers along with Citadel 0 en Collateral damage: Microsoft hits security researchers along with Citadel Cross-platform Frutas RAT builder and back door 0 en Cross-platform Frutas RAT builder and back door Demystifying Pobelka 0 en Demystifying Pobelka Department of Labor strategic web compromise 0 en Department of Labor strategic web compromise Detecting extended attributes (ZeroAccess) and other Frankenstein’s monsters with HMFT 0 en Detecting extended attributes (ZeroAccess) and other Frankenstein’s monsters with HMFT Discovered: botnet costing display advertisers over six million dollars per month 0 en Discovered: botnet costing display advertisers over six million dollars per month File infector Expiro hits US, steals FTP credentials 0 en File infector Expiro hits US, steals FTP credentials First widespread virus cross-infection 0 en First widespread virus cross-infection Five charged in largest hacking scheme ever prosecuted in US 0 en Five charged in largest hacking scheme ever prosecuted in US Going solo: self-propagating ZBOT malware spotted 0 en Going solo: self-propagating ZBOT malware spotted Got malware? Rent an exploit service 0 en Got malware? Rent an exploit service Hello Neutrino ! (just one more Exploit Kit) 0 en Hello Neutrino ! (just one more Exploit Kit) Hesperbot – A new, advanced banking trojan in the wild 0 en Hesperbot – A new, advanced banking trojan in the wild Hiding in plain sight: the FAKEM remote access trojan 0 en Hiding in plain sight: the FAKEM remote access trojan Infamous Skynet botnet author allegedly arrested 0 en Infamous Skynet botnet author allegedly arrested Inside the world of the Citadel trojan 0 en Inside the world of the Citadel trojan Internet Census 2012, port scanning /0 using insecure embedded devices 0 en Internet Census 2012, port scanning /0 using insecure embedded devices Kelihos botnet appears again with new variant 0 en Kelihos botnet appears again with new variant Kelihos is dead… No wait… Long live Kelihos! Again! 0 en Kelihos is dead… No wait… Long live Kelihos! Again! Kore exploit kit 0 en Kore exploit kit Latest Kelihos botnet shut down live at RSA Conference 2013 0 en Latest Kelihos botnet shut down live at RSA Conference 2013 Lifting the lid on the Redkit exploit kit (Part 1) 0 en Lifting the lid on the Redkit exploit kit (Part 1) Linux/Cdorked.A: New Apache backdoor being used in the wild to serve Blackhole 0 en Linux/Cdorked.A: New Apache backdoor being used in the wild to serve Blackhole Look what I found: it's a Pony! 0 en Look what I found: it's a Pony! MDK: the largest mobile botnet in China 0 en MDK: the largest mobile botnet in China Mac spyware found at Oslo Freedom Forum 0 en Mac spyware found at Oslo Freedom Forum Malware evolving to defeat anti-DDoS services like CloudFlare? 0 en Malware evolving to defeat anti-DDoS services like CloudFlare? Mariposa botnet 'mastermind' jailed in Slovenia 0 en Mariposa botnet 'mastermind' jailed in Slovenia Massive search fraud botnet seized by Microsoft and Symantec 0 en Massive search fraud botnet seized by Microsoft and Symantec Mastermind behind Gozi bank malware charged along with two others 0 en Mastermind behind Gozi bank malware charged along with two others Measuring and detecting malware downloads in live network traffic 0 en Measuring and detecting malware downloads in live network traffic Meet "Red Dot exploit toolkit" 0 en Meet "Red Dot exploit toolkit" Microsoft and Symantec take down Bamital botnet that hijacks online searches 0 en Microsoft and Symantec take down Bamital botnet that hijacks online searches Miniduke 0 en Miniduke Mysterious Avatar rootkit with API, SDK, and Yahoo Groups for C&C communication 0 en Mysterious Avatar rootkit with API, SDK, and Yahoo Groups for C&C communication NASK shuts down dangerous Virut botnet domains 0 en NASK shuts down dangerous Virut botnet domains NetTraveler is back: the 'Red Star' APT returns with new tricks 0 en NetTraveler is back: the 'Red Star' APT returns with new tricks New CryptoLocker spreads via removable drives 0 en New CryptoLocker spreads via removable drives New Mac malware discovered on attendee computer at anti-surveillance workshop 0 en New Mac malware discovered on attendee computer at anti-surveillance workshop New crimeware attacks LatAm bank users 0 en New crimeware attacks LatAm bank users Newly launched ‘HTTP-based botnet setup as a service’ empowers novice cybercriminals with bulletproof hosting capabilities 0 en Newly launched ‘HTTP-based botnet setup as a service’ empowers novice cybercriminals with bulletproof hosting capabilities Nymaim - obfuscation chronicles 0 en Nymaim - obfuscation chronicles OSX Kitmos analysis 0 en OSX Kitmos analysis PeerRush: mining for unwanted P2P traffic 0 en PeerRush: mining for unwanted P2P traffic PokerAgent botnet stealing over 16,000 Facebook credentials 0 en PokerAgent botnet stealing over 16,000 Facebook credentials Qadars: un nouveau malware bancaire avec un composant mobile 0 en Qadars: un nouveau malware bancaire avec un composant mobile Reversing Andromeda-Gamarue botnet 0 en Reversing Andromeda-Gamarue botnet SPL exploit kit – now with CVE-2013-0422 0 en SPL exploit kit – now with CVE-2013-0422 Secrets of the Comfoo masters 0 en Secrets of the Comfoo masters Stealing money from ATMs with malware 0 en Stealing money from ATMs with malware Stealthy peer-to-peer C&C over SMB pipes 0 en Stealthy peer-to-peer C&C over SMB pipes Survey on network-based botnet detection methods 0 en Survey on network-based botnet detection methods Takeover of Virut domains 0 en Takeover of Virut domains Targeted information stealing attacks in South Asia use email, signed binaries 0 en Targeted information stealing attacks in South Asia use email, signed binaries The "Red October" campaign - An advanced cyber espionage network targeting diplomatic and government agencies 0 en The "Red October" campaign - An advanced cyber espionage network targeting diplomatic and government agencies The MiniDuke mystery: PDF 0-day government spy assembler 0x29A micro backdoor 0 en The MiniDuke mystery: PDF 0-day government spy assembler 0x29A micro backdoor The ZeroAccess botnet revealed 0 en The ZeroAccess botnet revealed The life cycle of web server botnet recruitment 0 en The life cycle of web server botnet recruitment The most sophisticated Android trojan 0 en The most sophisticated Android trojan The rise of TOR-based botnets 0 en The rise of TOR-based botnets Travnet botnet steals huge amount of sensitive data 0 en Travnet botnet steals huge amount of sensitive data Travnet trojan could be part of APT campaign 0 en Travnet trojan could be part of APT campaign Trojan ChePro, the CPL storm 0 en Trojan ChePro, the CPL storm Trojan Nap aka Kelihos/Hlux - Feb. 2013 status update 0 en Trojan Nap aka Kelihos/Hlux - Feb. 2013 status update Trojan horse using sender policy framework 0 en Trojan horse using sender policy framework Trojan.Ransomgerpo criminal arrested 0 en Trojan.Ransomgerpo criminal arrested Under the hood of the cyber attack on U.S. banks 0 en Under the hood of the cyber attack on U.S. banks Unveiling an Indian cyberattack infrastructure - a special report 0 en Unveiling an Indian cyberattack infrastructure - a special report Urausy ransomware - July 2013 design refresh - "Summer 2013 collection" 0 en Urausy ransomware - July 2013 design refresh - "Summer 2013 collection" Urausy: Colorfull design refresh (+HR) & EC3 Logo 0 en Urausy: Colorfull design refresh (+HR) & EC3 Logo Versatile and infectious: Win64/Expiro is a cross-platform file infector 0 en Versatile and infectious: Win64/Expiro is a cross-platform file infector Virut malware fuels Waledac botnet resurgence 0 en Virut malware fuels Waledac botnet resurgence Waledac gets cozy with Virut 0 en Waledac gets cozy with Virut Walking through Win32/Jabberbot.A instant messaging C&C 0 en Walking through Win32/Jabberbot.A instant messaging C&C Why forums? An empirical analysis into the facilitating factors of carding forums 0 en Why forums? An empirical analysis into the facilitating factors of carding forums Win32/64:Napolar: New trojan shines on the cyber crime-scene 0 en Win32/64:Napolar: New trojan shines on the cyber crime-scene Win32/Vundo 0 en Win32/Vundo ZeroAccess anti-debug uses debugger 0 en ZeroAccess anti-debug uses debugger ZeuS-P2P monitoring and analysis 0 en ZeuS-P2P monitoring and analysis Anunak 0 en Anunak Atrax 0 en Atrax Avatar 0 en Avatar Gamker 0 en Gamker MiniDuke 0 en MiniDuke Njw0rm 0 en Njw0rm Obad 0 en Obad Raxm 0 en Raxm Vernot 0 en Vernot Rocra 0 en Rocra Skynet 0 en Skynet Year 102 en Year Begin year 102 en Begin year End year 102 en End year