Flashback

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Flashback
Alias	Flashfake
Group	Trojan, Downloading
Parent
Sibling
Family
Relations	Variants: Sibling of: Parent of: Distribution of: Campaigns:
Target	Mac OS X
Origin
Distribution vector
UserAgent	Mozilla/5.0 (Windows NT 6.1; WOW64; rv:9.0.1; sv:2; id: 1A698BE9-0211-5EB4-AFDC-644AA479D972) Gecko/20100101 Firefox/9.0.1
CCProtocol	HTTP (Centralized), Twitter (Centralized)
Activity	2011 / 2012
Status
Language
Programming language
Operation/Working group

Introduction

• http://public.dev.drweb.com/april/ (pour consulter la base des UUID repérés par Dr. Web comme faisant partie du botnet)

Features

• Domain generation algorithm

• File download

Publications

	Author	Editor	Year
Apple releases Java update; includes fix for vulnerability exploited by Flashback malware		Intego	2012
Doctor Web a détecté un botnet enrôlant plus de 550 000 Mac		Doctor Web	2012
Doctor Web exposes 550 000 strong Mac botnet		Doctor Web	2012
Flashfake Mac OS X botnet confirmed	Igor Soumenkov	Kaspersky lab	2012
Mac Flashback exploiting unpatched Java vulnerability	Brod	F-Secure	2012
OSX/Flashback - The first malware to infect hundreds of thousands of Apple Mac	Pierre-Marc Bureau	ESET	2012