Security-X
Forum Security-X => News => Discussion démarrée par: igor51 le octobre 31, 2016, 10:00:27
-
Inside the Gootkit C&C server
In September 2016, we discovered a new version of Gootkit with a characteristic and instantly recognizable feature: an extra check of the environment variable 'crackme' in the downloader's body. Just as interesting was the fact that we were able to gain access to the bot's C&C server, including its complete hierarchal tree of folders and files and their contents.
Source: Inside the Gootkit C&C server (https://securelist.com/blog/research/76433/inside-the-gootkit-cc-server/)