
Muchas habran leido sobre el nuevo auge en troyanos, los llamados Troyanos “Bancarios”, muchas querran saber ¿Como funciona un troyano bancario en el ordenador de una victima?,hay una respuesta para esto, solo miren este video demostración:
http://seguridad.internautas.org/html/4189.html
Análisis del troyano (mas tecnico):
http://seguridad.internautas.org/html/4185.html
Espero les sea de mucha ayuda, ademas he posteado el Bandook 1.35 que tambien se considera un troyano Bancario.
Sábado, Abril 7, 2007 | Por Walter Hernandez
Se que mas de uno habra escuchado algo relacionado con el troyano bancario, se que mas de uno tendra las ganas de usarlo, y en este caso ya contamos con una version publica del famoso troyano “Bandook”, conocido como el troyano bancario, con la especialidad de poder grabar lo que sucede en el escritorio de nuestra victima. Alguna caracteristicas que tiene esta version son:
Programmed by: Princeali
Language: C++
Release Date: 04/01/2007
Download Size: 3.14MB
Description:
Bandook is a FWB#++ Reverse Connection Rat (Remote Admin Tool) , with a Small Size server when packed 30 KB , and a Long list of amazing Features .
Features list of the Program
· Firewall bypass method: FWB#++ (Code Injection , API Unhook , Kernel Patch)
· reverse connection, all traffic through one port
· Safe Thread Based Client
· Persistance (Irremovable)
· Rootkit
· Plugins Based Server (30 KB Packed)
· Very Friendly Graphical User Interface
· Different Installation Pathes
· PNG / JPEG Compressions for screencapture and webcam
Managing Features :
· Filemanager with all types of functions, including Folder Mirror , Rar Folder/Files , File Search , Infect Files , Multiple Files Download / Upload , Download / Upload manager
· Registry Editor with all type of Functions
· Process manager (Shows Full path , and Modules Manager)
· Windows Manager (including a Send Key Function)
· Services Manager
Connection Features :
·Socks 4 proxy
·HTTP / HTTPS proxy
·Port Redirection
·TCP TUNNEL
·HTTP WEB Server
·FTP Server
·Remote Shell
·Flooding ( Mailbomb , DDOS attacks)
Spying Features :
·Screen manager with Screen Clicks
·Cam manager that Supports system with Multiple Cams
·Mic Manager (Record voice from Mic)
·Ims Spy (MSN,YAHOO,AIM)
·Keylogger ( live One )
·Offline keylogger (Colored HTML) , Live Passwords , IMS Spy with
Automatic Delivery to FTP
·Cached PWS Fetcher [6 embended PWS Plugins]
·VNC (Remote Desktop Live Control)
·Site Detection : Check all ur vics and know which one visits a specific site
·Clipboard manager
·Information about the remote machine
·Cache Reader
·Screen Recorder ( Record the user activities on the Screen into AVI Movies)
Others :
·Shutdown Menu
·Nuclear Fun Agent (Fun)
·Download from WEB / Mass Download / Seclection Download
·Visit Site
Y muchas mas caracteristicas que se que cada uno disfrutara tanto como yo.
Continuar Leyendo...
Sábado, Mayo 5, 2007 | Por Walter Hernandez
0 Comentarios