MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-27 01:07:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

PWOBot added

Browse source
This commit is contained in:
Alexandre Dulaunoy 2016-04-21 09:51:50 +02:00
parent 3faaaf657a
commit 98e2dedd7d
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
elements/threat-actor-tools.json
View file

@ -33,6 +33,11 @@
"description": "Android-based malware", "description": "Android-based malware",
"synonyms": ["GM-Bot", "Acecard"] "synonyms": ["GM-Bot", "Acecard"]
}, },
{
"value": "PWOBot",
"description": "We have discovered a malware family named ‘PWOBot’ that is fairly unique because it is written entirely in Python, and compiled via PyInstaller to generate a Microsoft Windows executable. The malware has been witnessed affecting a number of Europe-based organizations, particularly in Poland. Additionally, the malware is delivered via a popular Polish file-sharing web service.",
"refs": ["http://researchcenter.paloaltonetworks.com/2016/04/unit42-python-based-pwobot-targets-european-organizations/"]
},
{ {
"value": "Lstudio" "value": "Lstudio"
}, },