Difference between revisions of "PTA"

From Botnets.fr
Jump to navigation Jump to search
m (1 revision imported)
m (Text replacement - "TOR" to "Tor")
Line 2: Line 2:
|Fonctionnalités=* [[feature::Form data theft]]
|Fonctionnalités=* [[feature::Form data theft]]
* [[feature::SOCKS]] proxy
* [[feature::SOCKS]] proxy
|Infrastructure=Discovered in 2012, but the TOR protocol was introduced during summer 2012. TOR servers identified (ESET):
|Infrastructure=Discovered in 2012, but the Tor protocol was introduced during summer 2012. Tor servers identified (ESET):
* xtrb3h5gyswyzdc5.onion (/ct4.php)
* xtrb3h5gyswyzdc5.onion (/ct4.php)
* anhmgho2efkywudt.onion
* anhmgho2efkywudt.onion
|UserAgent=Unknown
|UserAgent=Unknown
|CCProtocol=TOR
|CCProtocol=Tor
|Target=Unknown
|Target=Unknown
|Status=Unknown
|Status=Unknown

Revision as of 18:19, 3 August 2015

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

PTA
Alias
Group Stealing
Parent
Sibling
Family
Relations Variants:

Sibling of:
Parent of:
Distribution of:
Campaigns:

Target Unknown
Origin
Distribution vector
UserAgent Unknown
CCProtocol Tor (Distributed-centralized)
Activity 2012 / Unknown
Status Unknown
Language
Programming language
Operation/Working group

Introduction

Features

Associated images

Checksums / AV databases

Publications

 AuthorEditorYear
The rise of TOR-based botnetsAleksandr MatrosovESET2013