Security-X
Forum Security-X => News => Discussion démarrée par: chantal11 le novembre 13, 2013, 10:09:08
-
MSRT November 2013 - Napolar
We first noticed the new family we named Win32/Napolar (http://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=Win32/Napolar) being distributed in the wild in early August this year. It quickly became a big problem on our customers’ machines.
Napolar is one of two families targeted by the Malicious Software Removal Tool (MSRT) this month. The other is the bitcoin mining family Win32/Deminnix.
As shown in the chart below, Napolar was hitting ~220K unique machines during the week of August 23rd.
Napolar is a trojan that can download and run files, utilize your machine’s resources to conduct a DDoS attack or serve as a SOCKS proxy, monitor network traffic, and steal credentials for FTP, POP3 and websites. There is also a plugin infrastructure designed in Napolar, but we haven’t seen much usage of it.
http://blogs.technet.com/b/mmpc/archive/2013/11/12/msrt-november-2013-napolar.aspx