Clampi

From Botnets.fr
(Redirected from Rscan)
Jump to: navigation, search

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Clampi
Alias Ligats, Rscan, Ilomo
Group Stealing
Parent
Sibling
Family
Relations Variants:

Sibling of:
Parent of:
Distribution of:
Campaigns:

Target Microsoft Windows, United States
Origin
Distribution vector
UserAgent
CCProtocol
Activity 2005 /
Status
Language
Programming language
Operation/Working group

Introduction

Le bot derrière le botnet Clampi (ou Ligats, Rscan, Ilomo) est formé par deux exécutables:

Les deux sont souvent détectés séparément par les logiciels antivirus.

Features


Associated images

Checksums / AV databases

Publications

 AuthorEditorYear
A study of the Ilomo / Clampi botnetAlice Decker
David Sancho
Max Goncharov
Robert McArdle
Trend Micro2009
Clampi/Ligats/Ilomo trojanJoe StewartDELL SecureWorks2009
The growing threat to business banking onlineBrian KrebsWashington Post2009