Difference between revisions of "IcoScript"
Jump to navigation
Jump to search
(Created page with "{{Botnet}}") |
|||
Line 1: | Line 1: | ||
{{Botnet}} | {{Botnet | ||
|Introduction=* Seen using Yahoo webmail as C&C | |||
|CCProtocol=HTTP, Webmail, | |||
|Feature=Component Object Model (COM), | |||
|Group=RAT, | |||
}} |
Latest revision as of 15:16, 18 July 2015
(Botnet) Link to the old Wiki page : [1] / Google search: [2]
IcoScript | |
---|---|
Alias | |
Group | RAT |
Parent | |
Sibling | |
Family | |
Relations | Variants: Sibling of: |
Target | |
Origin | |
Distribution vector | |
UserAgent | |
CCProtocol | HTTP (Centralized), Webmail (Centralized) |
Activity | / |
Status | |
Language | |
Programming language | |
Operation/Working group |
Introduction
- Seen using Yahoo webmail as C&C
Features
Associated images
Checksums / AV databases
Publications
Author | Editor | Year | |
---|---|---|---|
IcoScript: using webmail to control malware | Paul Rascagnères | Virus Bulletin | 2014 |