Dyre

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Dyre
Alias	Dyreza, Dyzap, Dyranges
Group	Banking
Parent
Sibling
Family
Relations	Variants: Sibling of: Dridex Parent of: Distribution of: Campaigns:
Target
Origin
Distribution vector	Cutwail, Dropbox, Cubby, Upatre, Gozi Neverquest
UserAgent
CCProtocol	HTTP (Centralized), I2P (Decentralized), HTTPS (Centralized)
Activity	2014 /
Status	active
Language
Programming language
Operation/Working group

Features

• Banking credential theft

• Man in the browser

• Backconnect server

• Custom C&C encryption algorithm

• Domain generation algorithm

Publications

	Author	Editor	Year
Chasing cybercrime: network insights of Dyre and Dridex trojan bankers	Blueliv	Blueliv	2015
Dyre Banking Trojan	Brett Stone-Gross Pallav Khandhar	DELL SecureWorks	2014
Kaspersky security bulletin 2015. Overall statistics for 2015	Maria Garnaeva Jornt van der Wiel Denis Makrushin Anton Ivanov Yury Namestnikov	Kaspersky Securelist	2015
Upatre, Dyre used in Univ. of Florida attack	Teri Robinson	SC Magazine	2015