I had to deal with a Gameover Zeus variant on a laptop at work last week. It was dropped by worm then the worm deleted itself and then the Trojan ran. The only way we caught it was because we caught the traffic being sent to a CC server. 😠
|
Warning
[BHCPU] Gameover Zeus Botnet being revived ! |
(Oct 9, 2014 03:48 PM)hyp3ri0n Wrote: I had to deal with a Gameover Zeus variant on a laptop at work last week. It was dropped by worm then the worm deleted itself and then the Trojan ran. The only way we caught it was because we caught the traffic being sent to a CC server. 😠 Did you keep or wrote down the address of that C&C server ? Fiat justitia ruat cælum
My era of providing technical support and malware removal on HackForums is over, so you can stop PM'ing me about it. Sorry. (Oct 10, 2014 05:52 PM)Aura Wrote: Did you keep or wrote down the address of that C&C server ? Yes, I have it documented in the incident response report I wrote up. I will post the address for the C&C it was communicating with on Monday so I can get the report from work. (Oct 10, 2014 07:30 PM)hyp3ri0n Wrote: Yes, I have it documented in the incident response report I wrote up. I will post the address for the C&C it was communicating with on Monday so I can get the report from work. Are you going to try to take it down or it's just because you have to report it ? Fiat justitia ruat cælum
My era of providing technical support and malware removal on HackForums is over, so you can stop PM'ing me about it. Sorry. |
|
|
