Difference between revisions of "IcoScript"
Jump to navigation
Jump to search
(Created page with "{{Botnet}}") |
|||
| Line 1: | Line 1: | ||
{{Botnet}} | {{Botnet | ||
|Introduction=* Seen using Yahoo webmail as C&C | |||
|CCProtocol=HTTP, Webmail, | |||
|Feature=Component Object Model (COM), | |||
|Group=RAT, | |||
}} | |||
Latest revision as of 15:16, 18 July 2015
(Botnet) Link to the old Wiki page : [1] / Google search: [2]
| IcoScript | |
|---|---|
| Alias | |
| Group | RAT |
| Parent | |
| Sibling | |
| Family | |
| Relations | Variants: Sibling of: |
| Target | |
| Origin | |
| Distribution vector | |
| UserAgent | |
| CCProtocol | HTTP (Centralized), Webmail (Centralized) |
| Activity | / |
| Status | |
| Language | |
| Programming language | |
| Operation/Working group | |
Introduction
- Seen using Yahoo webmail as C&C
Features
Associated images
Checksums / AV databases
Publications
| Author | Editor | Year | |
|---|---|---|---|
| IcoScript: using webmail to control malware | Paul Rascagnères | Virus Bulletin | 2014 |