View source for Citadel V1.3.5.1: enter the fort’s dungeons

{{Publication
|Link=http://blogs.rsa.com/rsafarl/citadel-v1-3-5-1-enter-the-forts-dungeons/
|Author=Limor Kessem
|NomRevue=Speaking of Security
|Date=2012-10-18
|Editor=RSA
|Year=2012
|Botnet=Citadel
|Abstract=The recent feature was christened under the name “Dynamic Config,” a technology implemented in Citadel v1.3.5.1 (“Rain Edition”) enabling botmasters smoother, quicker interactions with the victim through browser injection technology. Today’s fraud happens in real time, so speed is of the essence. This nifty function allows Trojan operators to create web injections and use them on the fly, pushing them to selected bots without the hassle of pushing/downloading an entire new configuration file.
}}