SpyEye Banking Trojan. - SecNiche Security Labs

More documents

Recommendations

Info

MITB – Man in the Browser Shift from MITM What about browser rootkit ? Is MITB and BR are same ?
Web Browser Injects Injecting malicious content. Hooks the HTTP communication channel between browser and website and uses HTTP API’s to update the content No tampering in the banking URL. Address bar remains same showing the authentic domain name. Pure technique of DLL Hijacking and API Hooking Generic Explanation
Page 1 and 2: Eye for an Eye SpyEye Banking Troja
Page 3 and 4: About Me Founder , SecNiche Securit
Page 5 and 6: Problem
Page 7 and 8: SpyEye Released Analysis - Relative
Page 9 and 10: Design
Page 11 and 12: SpyEye Builder - Specific Details B
Page 13 and 14: Generic HWID - One Machine License
Page 15 and 16: SpyEye - Main Admin Admin panel pro
Page 17 and 18: Backend Collector SpyEye database s
Page 19 and 20: Trade and Tactics
Page 21: Tampering Browser Activity
Page 25 and 26: Web Fakes DLL - Pseudo Code
Page 27 and 28: Malicious Plugin Generation - Pseud
Page 29 and 30: Questions ??

SpyEye Banking Trojan. - SecNiche Security Labs

Create successful ePaper yourself

Delete template?

Save as template?