Difference between revisions of "Main Page"

From Botnets.fr
Jump to navigation Jump to search
(135 intermediate revisions by the same user not shown)
Line 1: Line 1:
__NOTOC__
__NOTOC__


Thank you for your patience, the botnets.fr Wiki is being rebuilt.
Thank you for your patience, the botnets.fr Wiki is being rebuilt (the previous wiki is still available at https://www.botnets.fr/wiki.old)
[[File:under_construction.jpg|thumb|150px]]
 
== Introduction ==
This semantic Wiki is developed since November 2011 in the context of a PhD work on the fight against botnets conducted at the LIP 6 laboratory in Paris (Complex networks team). The PhD was successfully [http://blog.crimenumerique.fr/2015/11/21/lutte-contre-les-botnets/ defended in November 2015 in Paris], France. But work continues...


[[File:under_construction.jpg|thumb|150px]]
== Botnets ==
== Botnets ==
{{Div col|3}}
{{Div col|3}}
=== A ===
=== A ===
* [[AbaddonPOS]]
* [[Accdfisa]]
* [[Accdfisa]]
* [[Acebot]]
* [[Acebot]]
Line 15: Line 19:
* [[Agobot]] / [[Gaobot]] Related families: [[Phatbot]], [[Forbot]], [[Polybot]], [[XtremBot]]
* [[Agobot]] / [[Gaobot]] Related families: [[Phatbot]], [[Forbot]], [[Polybot]], [[XtremBot]]
* [[Ainslot]]
* [[Ainslot]]
* [[Akbot]] / Qakbot, Pinkslipbot, Qbot
* [[Akbot]] / [[Qakbot]], [[Pinkslipbot]], [[Qbot]]
* [[Aldi]]
* [[Aldi]]
* [[Alebrije]]
* [[Alebrije]]
* [[AlertLock]]
* [[AlertLock]]
* [[Alina]]
* [[Alphacrypt]]
* [[Alureon]] / [[Olmarik]], [[TDSS]], [[TDL]], [[Popureb]]
* [[Alureon]] / [[Olmarik]], [[TDSS]], [[TDL]], [[Popureb]]
* [[Americana Dreams]]
* [[Americana Dreams]]
* [[Android.Bmaster]]
* [[Andromeda]] / [[Gamarue]]
* [[Andromeda]] / [[Gamarue]]
* [[AnnLoader]]
* [[AnnLoader]]
Line 40: Line 45:
* [[Bamital]]
* [[Bamital]]
* [[Barracuda]]
* [[Barracuda]]
* [[Bashlight]]
* [[Bedep]]
* [[Beebone]] / [[Symmi]], [[Changeup]], [[Vobfus]]
* [[Bereb]] / Related to [[Kiribot]]
* [[Bereb]] / Related to [[Kiribot]]
* [[BernhardPOS]]
* [[BlackEnergy]]
* [[BlackEnergy]]
* [[BlackPOS]] / [[Dump Memory Grabber]]
* [[BlackShades]]
* [[BlackShades]]
* [[Bmaster]]
* [[Bobax]] / [[Bobic]], [[Oderoor]], [[Cotmonger]], [[Hacktool.Spammer]], [[Kraken]]
* [[Bobax]] / [[Bobic]], [[Oderoor]], [[Cotmonger]], [[Hacktool.Spammer]], [[Kraken]]
* [[Bomba Locker]]
* [[Bomba Locker]]
* [[Boxer]]
* [[Bozok]]
* [[Bozok]]
* [[Bredolab]]
* [[Bredolab]]
* [[BrutPOS]]


=== C ===
=== C ===
* [[Carbanak]]
* [[Carberp]] / [[Caberp]], [[Syscron]]
* [[Carberp]] / [[Caberp]], [[Syscron]]
* [[Carna]]
* [[Casier]]
* [[Casier]]
* [[Cbeplay.P]]
* [[Cbeplay.P]]
* [[Cerber]]
* [[Cerberus]]
* [[Cerberus]]
* [[Chameleon]]
* [[Chameleon]]
* [[ChewBacca]]
* [[Chidol]]
* [[Chidol]]
* [[Chthonic]]
* [[Cimbot]]
* [[Cimbot]]
* [[Citadel]]
* [[Citadel]]
* [[Clampi]] / [[Ligats]], [[Ilomo]] or [[Rscan]]
* [[Clampi]] / [[Ligats]], [[Ilomo]] or [[Rscan]]
* [[Coinbitclip]]
* [[CoinVault]]
* [[Comfoo]]
* [[Comfoo]]
* [[Conficker]] / [[Downup]], [[Downadup]], [[Kido]]
* [[Conficker]] / [[Downup]], [[Downadup]], [[Kido]]
* [[CoreBot]]
* [[Coreflood]]
* [[Coreflood]]
* [[Coverton]]
* [[Cridex]] / [[Bugat]], [[Feodo]]
* [[Cridex]] / [[Bugat]], [[Feodo]]
* [[Critroni]] / [[CTB-Locker]]
* [[Critroni]] / [[CTB-Locker]]
* [[Cryakl]] / [[Fantomas]]
* [[CryptoDefense]]
* [[CryptoDefense]]
* [[CryptoLocker]]
* [[CryptoLocker]]
* [[Cryptoblocker]]
* [[Cryptoblocker]]
* [[CryptXXX]]
* [[Cutwail]] / [[Pandex]], [[Mutant]]
* [[Cutwail]] / [[Pandex]], [[Mutant]]
* [[Cythosia]]
* [[Cythosia]]


=== D ===
=== D ===
* [[Daredevil]]
* [[DaRK DDoSseR]]
* [[DaRK DDoSseR]]
* [[Dark-Mailer]]
* [[Dark-Mailer]]
* [[DarkComet]]
* [[DarkComet]]
* [[DarkMegi]]
* [[Darkness]] / [[Optima]], [[Votwup]]
* [[Darkness]] / [[Optima]], [[Votwup]]
* [[Decebal]]
* [[Destory]]
* [[Destory]]
* [[Devdar]]
* [[Devdar]]
* [[Dexter]]
* [[Dharma]]
* [[Dirt Jumper]]
* [[Dirt Jumper]]
* [[Disker]]
* [[Disker]]
Line 85: Line 114:
* [[Dorkbot]] / [[Nrgbot]], [[Ngrbot]]
* [[Dorkbot]] / [[Nrgbot]], [[Ngrbot]]
* [[Duqu]]
* [[Duqu]]
* [[Dyre]] / [[Dyreza]], [[Dyzap]], [[Dyranges]]


=== E ===
=== E ===
* [[Eagle]]
* [[Eggdrop]]
* [[Eggdrop]]
* [[Encriyoko]]
* [[Encriyoko]]
* [[Epubb]]
* [[Epubb]]
* [[Ertfor]]
* [[Esthost]]
* [[Esthost]]
* [[Etumbot]]
* [[Etumbot]]
Line 97: Line 129:
* [[Fakavalert]]
* [[Fakavalert]]
* [[FakeM]]
* [[FakeM]]
* [[Feedorbot]]
* [[Feederbot]]
* [[Festi]]
* [[Festi]]
* [[Fivetoone]] / [[DMSpammer]]
* [[Fivetoone]] / [[DMSpammer]]
Line 105: Line 137:
* [[Flimrans]]
* [[Flimrans]]
* [[Foag]]
* [[Foag]]
* [[Forbot]]
* [[FrameworkPOS]]
* [[Frutas]]
* [[Frutas]]
* [[Fuflo]]
* [[Fuflo]]
Line 110: Line 144:
=== G ===
=== G ===
* [[Galock]]
* [[Galock]]
* [[GamaPoS]]
* [[Gameover]] / [[P2P ZeuS]]
* [[Gameover]] / [[P2P ZeuS]]
* [[Gammima]]
* [[Gammima]]
Line 118: Line 153:
* [[Gendarmerie]]
* [[Gendarmerie]]
* [[Generetic]]
* [[Generetic]]
* [[Getmypass]]
* [[Gheg]] / [[Tofsee]], [[Mondera]]
* [[Gheg]] / [[Tofsee]], [[Mondera]]
* [[Gimemo]]
* [[Gimemo]]
* [[Gh0st RAT]]
* [[Gh0st RAT]]
* [[GlassRAT]]
* [[Goldenbaks]]
* [[Goldenbaks]]
* [[GootKit]]
* [[Goscri]]
* [[Goscri]]
* [[Gozi]] / [[Ursnif]], [[Prinimalka]], [[Vawtrak]]
* [[Gozi]] / [[Ursnif]], [[Prinimalka]], [[Vawtrak]]
* [[Gpcode]]
* [[Gpcode]]
* [[GranCrab]] / [[GandCrab]]
* [[Grum]] / [[Tedroo]]
* [[Grum]] / [[Tedroo]]
* [[Gumblar]]
* [[Gumblar]]
Line 137: Line 176:
* [[Hermes]]
* [[Hermes]]
* [[HerpesNet]]
* [[HerpesNet]]
* [[Hesperbot]]
* [[Hikit]]
* [[Hikit]]
* [[Hiloti]]
* [[Hiloti]]
* [[Hodprot]]
* [[Hodprot]]
* [[H-Worm]]


=== I ===
=== I ===
Line 151: Line 192:


=== J ===
=== J ===
* [[JackPOS]]
* [[Jagfu]]
* [[Jagfu]]
* [[Jenxcus]]
* [[Jenxcus]]
* [[Jigsaw]]


=== K ===
=== K ===
Line 159: Line 202:
* [[Karn!v0r3x]]
* [[Karn!v0r3x]]
* [[Kelihos]]
* [[Kelihos]]
* [[KINS]]
* [[Kjw0rm]]
* [[Kneber]]
* [[Kneber]]
* [[Koler]]
* [[Kovter]]
* [[Kovter]]
* [[Koobface]]
* [[Koobface]]
Line 168: Line 214:
* [[Leouncia]]
* [[Leouncia]]
* [[Lethic]]
* [[Lethic]]
* [[Lockscreen.CI]]
* [[LockerGoga]]
* [[LockScreen.CI]]
* [[Locky]]
* [[LogPOS]]
* [[Lukitus]]
* [[LusyPOS]]
* [[Lyposit]]
* [[Lyposit]]


Line 176: Line 227:
* [[Makadocs]]
* [[Makadocs]]
* [[Malex]]
* [[Malex]]
* [[MalumPoS]]
* [[Mariachi]]
* [[Mariachi]]
* [[Mariposa]]
* [[Mariposa]]
Line 186: Line 238:
* [[MiniDuke]]
* [[MiniDuke]]
* [[Mirage]]
* [[Mirage]]
* [[Mirai]]
* [[Mlano]]
* [[Mlano]]
* [[Mocbot]] / [[Wargbot]], [[Graweg]]
* [[Mocbot]] / [[Wargbot]], [[Graweg]]
* [[ModPOS]]
* [[Monkif]] / [[ExeDot]], [[DIKhora]]
* [[Monkif]] / [[ExeDot]], [[DIKhora]]
* [[MP-DDoser]]
* [[MP-DDoser]]
Line 196: Line 250:
=== N ===
=== N ===
* [[NanoCore]]
* [[NanoCore]]
* [[Nemucod]]
* [[Netsky]]
* [[Netsky]]
* [[Nertra]]
* [[Nertra]]
* [[NetTraveler]]
* [[NetTraveler]]
* [[NewPOSThings]]
* [[Ngrbot]]
* [[Ngrbot]]
* [[NitlovePOS]]
* [[Nitol]]
* [[Nitol]]
* [[Nitro]]
* [[Nitro]]
* [[NjRAT]] / Variant: [[H-Worm]]
* [[Njw0rm]]
* [[Nucrypt]] / [[Loosky]], [[Locksky]]
* [[Nucrypt]] / [[Loosky]], [[Locksky]]
* [[Nugache]]
* [[Nugache]]
Line 209: Line 268:
* [[Obad]]
* [[Obad]]
* [[OneWordSub]]
* [[OneWordSub]]
* [[OphionLocker]]


=== P ===
=== P ===
* [[Pandora]]
* [[Pandora]]
* [[Patcher]] / [[Multibanker]], [[Bankpatcher]]
* [[Patcher]] / [[Multibanker]], [[Bankpatcher]]
* [[Petya]]
* [[Pexby]]
* [[Pexby]]
* [[Phatbot]]
* [[Phatbot]]
* [[PiceBOT]]
* [[PiceBOT]]
* [[PickPocket]]
* [[PickPocket]]
* [[Pinkslipbot]]
* [[Pirpi]]
* [[Pirpi]]
* [[Pitou]]
* [[Pitou]]
Line 235: Line 297:
* [[Psybot]]
* [[Psybot]]
* [[PTA]]
* [[PTA]]
* [[Punkey]]
* [[Pushdo]]
* [[Pushdo]]


Line 251: Line 314:
* [[Ransom.JU]]
* [[Ransom.JU]]
* [[Raxm]]
* [[Raxm]]
* [[Rdasrv]]
* [[Regin]]
* [[Regin]]
* [[Reposin]]
* [[Reposin]]
* [[Revenge RAT]]
* [[Reveton]]
* [[Reveton]]
* [[Revoyem]]
* [[Revoyem]]
Line 259: Line 324:


=== S ===
=== S ===
* [[Sage]]
* [[Sality]]
* [[SamSam]]
* [[Sasser]]
* [[Sasser]]
* [[ScarePakage]]
* [[ScarePakage]]
* [[Sdbot]]
* [[Sdbot]]
* [[Shifu]]
* [[Shylock]] / [[Caphaw]]
* [[Shylock]] / [[Caphaw]]
* [[Silence Locker]]
* [[Silence Locker]]
* [[Silent Winlocker]]
* [[Silent Winlocker]]
* [[Silon]]
* [[Silon]]
* [[Simda]]
* [[Simplocker]]
* [[Simplocker]]
* [[Sinit]]
* [[Sinit]]
* [[Sinowal]] / [[Mebroot]], [[Rootkit MBR]], [[Bootkit (botnet)]]
* [[Sir DoOom]]
* [[Skunkx]]
* [[Skunkx]]
* [[Slapper]]
* [[Slapper]]
Line 275: Line 347:
* [[Sobig]] / [[Palyh]]
* [[Sobig]] / [[Palyh]]
* [[Solar]] / [[Napolar]]
* [[Solar]] / [[Napolar]]
* [[Sopelka]]
* [[Soraya]]
* [[Spachanel]]
* [[Spachanel]]
* [[SpamSoldier]]
* [[SpamSoldier]]
* [[SpamThru]] / [[Spam-DComServ]], [[Covesmer]], [[Xmiler]]
* [[SpamThru]] / [[Spam-DComServ]], [[Covesmer]], [[Xmiler]]
* [[Spark]]
* [[SpyEye]]
* [[SpyEye]]
* [[Spybot]] / [[SDBot]], [[Rbot]], [[URBot]], [[URXBot]]
* [[SpyBot]] / [[SDBot]], [[Rbot]], [[UrBot]], [[UrXBot]]
* [[Srizbi]] / [[Cbeplay]], [[Exchanger]]
* [[Srizbi]] / [[Cbeplay]], [[Exchanger]]
* [[Storm]] / [[Nuwar]], [[Peacomm]], [[Zhelatin]], [[Tibs]]
* [[Storm]] / [[Nuwar]], [[Peacomm]], [[Zhelatin]], [[Tibs]]
Line 295: Line 370:
* [[Tatanga]]
* [[Tatanga]]
* [[Tequila]]
* [[Tequila]]
* [[TeslaCrypt]]
* [[The Mask]]
* [[The Mask]]
* [[Thor]]
* [[Thor]]
Line 301: Line 377:
* [[Tilon]]
* [[Tilon]]
* [[Tinba]] / [[Gataka]]
* [[Tinba]] / [[Gataka]]
* [[TinyNuke]]
* [[Tobfy]]
* [[Tobfy]]
* [[Tobfy.N]]
* [[Tobfy.N]]
* [[Torpig]]
* [[Torpig]]
* [[TorrentLocker]]
* [[Travnet]]
* [[Travnet]]
* [[TreasureHunt]]
* [[Turla]] / [[Uroburos]], [[Snake]]
* [[Twitter based botnet]]
* [[Twitter based botnet]]


Line 322: Line 402:
* [[Vicas]]
* [[Vicas]]
* [[VinSelf]]
* [[VinSelf]]
* [[ViperRAT]]
* [[VirLock]]
* [[Virut]]
* [[Virut]]
* [[VOlk]]
* [[VOlk]]
Line 327: Line 409:
=== W ===
=== W ===
* [[Waledac]] / [[Waled]], [[SLM]], [[Kelihos]], [[Hilux]], [[Hlux]], [[Nap]]
* [[Waledac]] / [[Waled]], [[SLM]], [[Kelihos]], [[Hilux]], [[Hlux]], [[Nap]]
* [[Wannacry]]
* [[Warezov]]
* [[Warezov]]
* [[Warbot]]
* [[Warbot]]
Line 352: Line 435:
* [[ZeuS]] / [[Zunker]]
* [[ZeuS]] / [[Zunker]]
* [[ZeuS - P2P+DGA]]
* [[ZeuS - P2P+DGA]]
{{Div col end}}
==Campaigns==
{{Div col|3}}
=== D ===
* [[Dragonfly]] / [[Energetic Bear]]
{{Div col end}}
{{Div col end}}


==Groups==
==Groups==
* [[Banking]]
* [[Banking]]
** [[Point-of-sale]]
* [[Click frauding]]
* [[DDoSing]]
* [[DDoSing]]
* [[Ransomware]]
* [[Ransomware]]
Line 364: Line 455:
* [[RAT]] / [[Remote administration trojan]]
* [[RAT]] / [[Remote administration trojan]]
* [[Spying]]
* [[Spying]]
** [[Destructive]]
* [[Spamming]]
* [[Spamming]]
* [[Stealing]]
* [[Stealing]]
Line 373: Line 465:
* Exchange
* Exchange
* Mules
* Mules
* Pay-per-install
* Security software check
* Security software check
* Traffic
* Traffic
Line 383: Line 476:
{{Div col|3}}
{{Div col|3}}
=== A ===
=== A ===
* Angler
* [[Alpha Pack]]
* [[Angler]]
* [[Archie]]
* [[Assoc AID]]
* [[Astrum]]
 
=== B ===
=== B ===
* Best
* [[Best]]
* Blackhole
* [[Black Dragon]]
* Bleeding Life
* [[Blackhole]]
* [[Bleeding Life]]
 
=== C ===
=== C ===
* ChePack
* [[ChePack]]
* Cool Exploit Kit
* [[CkVip]]
* CritXPack
* [[Cool Exploit Kit]]
* [[Cool Pack]]
* [[CritXPack]] / [[Vintage Pack]]
 
=== D ===
* [[Dotkachef]]
 
=== E ===
=== E ===
* EgyPack
* [[EgyPack]]
* Eleonore
* [[Eleonore]]
=== F ===
=== F ===
* Flimkit
* [[Fiesta]]
* Fragus
* [[Flash (Exploit kit)]]
* [[Flimkit]]
* [[Fragus]]
 
=== G ===
=== G ===
* Gong Da / Gongdad
* [[Glazunov]]
* GrandSoft
* [[Gong Da]] / [[Gongdad]]
* [[GrandSoft]]
 
=== H ===
* [[Hanjuan]]
* [[Hierarchy]]
 
=== I ===
=== I ===
* Impact
* [[Impact]]
* Incognito
* [[Incognito]]
* [[Infinity (Exploit kit)]]
 
=== K ===
=== K ===
* KaiXin / Gondad
* [[KaiXin]] / [[Gondad]]
* Kein
* [[Kore]]
 
=== L ===
* [[LightsOut]]
 
=== M ===
=== M ===
* Mushroom
* [[Magnitude]]
* [[MPack]]
* [[Mushroom]]
 
=== N ===
=== N ===
* Neutrino
* [[NeoSploit]]
* Nice
* [[Neutrino]]
* Nuclear Pack
* [[Nice]]
* [[Niteris]]
* [[Nuclear Pack]]
* [[Null Hole]]
 
=== P ===
=== P ===
* Phoenix
* [[Phoenix]]
* [[Private EK]]
* [[ProPack]]
 
=== R ===
=== R ===
* Red Dot
* [[Red Dot]]
* RedKit
* [[RedKit]] / [[Goon]], [[Puerto]]
* [[RIG]]
 
=== S ===
=== S ===
* Sakura
* [[Sakura]]
* Sava
* [[Sava]]
* Serenity
* [[Serenity]] / [[Serenity Pack]]
* Sibhost / Kore
* [[Siberia]] / [[Siberia Private]]
* Sweet Orange
* [[Sibhost]] / [[Kore]], [[Urausy EK]], [[BestAV EK]]
* [[SofosFO]]
* [[Spartan]]
* [[SPL Pack]]
* [[Styx]] / [[Kein]]
* [[Sundown]]
* [[Sweet Orange]]
 
=== T ===
=== T ===
* T-Pack
* [[T-Pack]]
* [[Techno XPack]]
 
=== V ===
=== V ===
* Vintage Pack
* [[Vintage Pack]]
=== X ===
* [[x2o]] / [[Redkit light]]
 
=== Y ===
* [[Yang Pack]]
=== Z ===
* [[Zhi Zhu]]
{{Div col end}}
{{Div col end}}
== Malware and botnet related Services ==
== Malware and botnet related Services ==
=== C ===
=== C ===
* Check4Me
* [[Check4Me]]
=== I ===
=== I ===
* Iframeshop
* [[Iframeshop]]
=== P ===
=== P ===
* Prepaidex
* [[Prepaidex]]
=== S ===
=== S ===
* Scan4you
* [[Scan4you]]
* SollHost
* [[SollHost]]

Revision as of 15:10, 12 May 2019


Thank you for your patience, the botnets.fr Wiki is being rebuilt (the previous wiki is still available at https://www.botnets.fr/wiki.old)

Under construction.jpg

Introduction

This semantic Wiki is developed since November 2011 in the context of a PhD work on the fight against botnets conducted at the LIP 6 laboratory in Paris (Complex networks team). The PhD was successfully defended in November 2015 in Paris, France. But work continues...

Botnets

A

B

C

D

E

F

G

H

I

J

K

L

M

N

O

P

Q

R

S

T

U

V

W

X

Y

Z

Campaigns

Groups

Criminal services

  • Bulletproof hosting
  • DDoSing / Stress test
  • Encryption
  • Exchange
  • Mules
  • Pay-per-install
  • Security software check
  • Traffic
  • VPN

Panels

Z

Exploit kits/packs

Malware and botnet related Services

C

I

P

S