|
Authored by: Anonymous on Thursday, February 07 2013 @ 04:53 PM EST |
It's a trojan. See this Symantec write-up, so I guess it's most likely arriving in email
attachments. [ Reply to This | Parent | # ]
|
|
Authored by: Anonymous on Thursday, February 07 2013 @ 08:48 PM EST |
MS says Bamital "usually" uses the Phoenix Exploit Kit. This old post from
websense indicates Phoenix is a typical drive-by that grabs at
anything loose
on your machine. The
declaration PDF, of Craig Schmidt in support of MS'
complaint PDF, claims to show the exploit working with
Firefox+Bing. When MS & Symantec
claimed to have taken down the (more like
a) Zeus botnet, the source code had been
on git-hub so long that
variants are popping up again now. I expect this one to bounce too. [ Reply to This | Parent | # ]
|
- Correction - Authored by: Anonymous on Thursday, February 07 2013 @ 08:58 PM EST
|
|
|
|