Dorkbot

From Botnets.fr
Revision as of 14:46, 8 August 2015 by Eric.freyssinet (Talk | contribs) (Text replacement - "=Unknown" to "=")

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Dorkbot
Alias Ngrbot
Group DDoSing
Parent
Sibling
Family
Relations Variants:

Sibling of:
Parent of:
Distribution of:
Campaigns:

Target Microsoft Windows
Origin
Distribution vector
UserAgent
CCProtocol IRC (Centralized)
Activity 2011 /
Status
Language
Programming language
Operation/Working group

Introduction

Dorkbot appelé également Ngrbot représente un réseau de machines zombies infectées par le cheval de Troie du même nom. Il est notamment connu pour ses modes de réplications divers tels que la messagerie instantané, les réseaux sociaux (notamment Facebook) et les périphériques amovibles.

Features


Associated images

Checksums / AV databases

Publications

 AuthorEditorYear
A chat with NGR BotChong Rong HwaInfoSec Institude2012
An analysis of Dorkbot’s infection vectors (part 2)Horea CoroiuMicrosoft Malware Protection Centre2012
Analysis of ngrBotKimberlyStopMalvertising2011
Dorkbot: conquistando LatinoaméricaPablo RamosESET2012
MSRT March 2012: breaking badRex PlantadoMicrosoft2012
NGRBot spreads via chatNiranjan JayanandMcAfee2012
Ngrbot steals information and mine BitcoinsSonicWALL UTM research teamSonicWALL2011
The Dorkbot risesBernadette IrincoTrend Micro2012