Difference between revisions of "Travnet"

Revision as of 01:32, 1 August 2015

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Travnet
Alias
Group
Parent
Sibling
Family
Relations	Variants: Sibling of: Parent of: Distribution of: Campaigns:
Target	Unknown
Origin
Distribution vector
UserAgent	Unknown
CCProtocol	HTTP (Centralized)
Activity	2009 / Unknown
Status	Unknown
Language
Programming language
Operation/Working group

	Author	Editor	Year
Travnet botnet steals huge amount of sensitive data	Umesh Wanve	McAfee	2013
Travnet trojan could be part of APT campaign	Vikas Taneja	McAfee	2013

@@ Line 1: / Line 1: @@
 {{Botnet
-|Fonctionnalités=* [[feature::Data theft]] (searches for doc, docx, xls, xlsx, txt, rtf, pdf files, lists all filenames, all files from desktop)
+|Target=Unknown
-* Lossless [[feature::Data compression]] for upload (similar to LZSS and then a custom Base64 encoding)
-* Uses Internet Explorer by injecting a DLL to send the files
 |UserAgent=Unknown
-|Language1=Chinese
 |CCProtocol=HTTP
-|Target=Unknown
 |Status=Unknown
 |BeginYear=2009
 |EndYear=Unknown
-|Alias=Travnet
+|Fonctionnalités=* [[feature::Data theft]] (searches for doc, docx, xls, xlsx, txt, rtf, pdf files, lists all filenames, all files from desktop)
+* Lossless [[feature::Data compression]] for upload (similar to LZSS and then a custom Base64 encoding)
+* Uses Internet Explorer by injecting a DLL to send the files
+|Language1=Chinese
 |Vendor1=McAfee
 |Victime4=
 }}