Tequila

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Tequila
Alias
Group	Banking, Downloading, Click frauding
Parent
Sibling
Family	Botnet PHP
Relations	Variants: Sibling of: Alebrije Parent of: Distribution of: Campaigns:
Target	Paypal, Bancomer
Origin
Distribution vector
UserAgent
CCProtocol	HTTP (Centralized)
Activity	/
Status
Language
Programming language
Operation/Working group

Features

• USB vector

• MSN vector

• Pharming

• File download

• DDoS

• Netcat

• Hosts modification

• File download

• Display advertising pop-ups

• Run commands

• Startpage modification

• MSN vector

• USB vector

• Open website in browser

Checksums / AV databases

• Trend Micro: TSPY_MEXBANK.A

Publications

	Author	Editor	Year
Discerning relationships: the Mexican botnet connection	Ranieri Romera	Trend Micro	2010
Mexican Twitter-controlled botnet unpicked	John Leyden	The Register	2010
Security experts detected new Twitter-controlled botnet	Inconnu	Spamfighter	2010