Dridex P2P Malware

ronjor · Oct 13, 2015

Original release date: October 13, 2015
Systems Affected Microsoft Windows
Overview
Dridex, a peer-to-peer (P2P) bank credential-stealing malware, uses a decentralized network infrastructure of compromised personal computers and web servers to execute command-and-control (C2). The United States Department of Homeland Security (DHS), in collaboration with the Federal Bureau of Investigation (FBI) and the Department of Justice (DOJ), is releasing this Technical Alert to provide further information about the Dridex botnet.
Click to expand...

https://www.us-cert.gov/ncas/alerts/TA15-286A

ronjor · Oct 14, 2015

US, UK disrupt Dridex botnet, which targeted online banking
Dridex is considered one of the most effective banking malware families

By Jeremy Kirk IDG News Service | Oct 13, 2015 8:23 PM PT
Click to expand...

http://www.networkworld.com/article...dex-botnet-which-targeted-online-banking.html

ronjor · Oct 19, 2015

Dridex Still Active After Takedown Attempt
By Eduard Kovacs on October 19, 2015

Law enforcement authorities in the U.S. and Europe, and several private security firms have launched an operation aimed at the Dridex botnet, but the threat still appears to be active.
Click to expand...

http://www.securityweek.com/dridex-still-active-after-takedown-attempt

Amanda · Oct 19, 2015

In one example, Ghinkul and his gang allegedly transferred $2.1 million from an account of Penneco Oil Company, based in Delmont, Pennsylvania, to one in Krasnodar, Russia, on Aug. 31, 2012, according to the indictment.
Four days later, Penneco Oil was hit again, this time with $1.3 million going to an account in Minsk, Belarus. The same day, the group allegedly tried to transfer a further $76,520 from the company's accounts.
Click to expand...

Have the company not noticed they were robbed? They should've acted right after the first attack.

ronjor · Apr 9, 2016

Dridex Malware Now Used For Stealing Payment Card Data

Jai Vijayan 4/8/2016

An analysis of Dridex infrastructure shows dangerous changes, potentially new operators.
Click to expand...

Minimalist · May 5, 2016

Dridex Botnet Hacked for the Third Time in Three Months

A mysterious hacker is having a laugh at Dridex's expense once again after he recently hacked the malware's botnet and replaced the Locky ransomware with an empty file that contained the phrase "Stupid Locky."
Click to expand...

http://news.softpedia.com/news/dridex-botnet-hacked-for-the-third-time-in-three-months-503723.shtml

itman · May 5, 2016

At last, a ransomware "white knight."

Log in or Sign up

Dridex P2P Malware

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Amanda Registered Member

ronjor Global Moderator

Minimalist Registered Member

itman Registered Member

Log in or Sign up

Dridex P2P Malware

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Amanda Registered Member

ronjor Global Moderator

Minimalist Registered Member

itman Registered Member

Useful Searches