Difference between revisions of "Ranbyus"

From Botnets.fr
Jump to navigation Jump to search
m (Text replacement - "=Unknown" to "=")
 
Line 1: Line 1:
{{Botnet
{{Botnet
|Introduction=
|Features=* malicious smartcard manipulation
|Fonctionnalités=* malicious smartcard manipulation
|Illustrations=
|Commandes=
|Infrastructure=
|Commercialisation=
|UserAgent=Mediapartners-Google
|UserAgent=Mediapartners-Google
|UserAgent2=
|UserAgent3=
|UserAgent4=
|Language1=
|Language2=
|Language3=
|Language4=
|CCProtocol=HTTP
|CCProtocol=HTTP
|CC2=
|CC3=
|Target=
|OS2=
|OS3=
|OS4=
|Status=
|BeginYear=
|EndYear=
|Group=Banking
|Group=Banking
|Groupe2=
|Alias=Azbreg
|Alias=Azbreg
|Vendor1=Kaspersky
|Alias=
|Vendor2=
|Alias=
|Vendor3=
|Alias=
|Vendor4=
|Alias=
|Vendor5=
|Alias=
|Vendor6=
|Alias=
|Vendor7=
|Alias=
|Vendor8=
|Alias=
|Vendor9=
|Alias=
|Vendor10=
|Vector=
|Exploitkit2=
|Exploitkit3=
|Exploitkit4=
|Exploitkit5=
|Victime1=RBS
|Victime2=
|Victime3=
|Yara rules=
|Victime4=
}}
}}

Latest revision as of 06:24, 14 August 2015

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Ranbyus
Alias Azbreg
Group Banking
Parent
Sibling
Family
Relations Variants:

Sibling of:
Parent of:
Distribution of:
Campaigns:

Target
Origin
Distribution vector
UserAgent Mediapartners-Google
CCProtocol HTTP (Centralized)
Activity /
Status
Language
Programming language
Operation/Working group

Introduction

Features

Associated images

Checksums / AV databases

Publications

 AuthorEditorYear
Smartcard vulnerabilities in modern banking malwareAleksandr MatrosovESET2012
Win32/Spy.Ranbyus modifying Java code in RBS Ukraine systemsAleksandr MatrosovESET2012