[SecListe]Comparing the Regin module 50251 and the "Qwerty" keylogger

[igor51]

Comparing the Regin module 50251 and the "Qwerty" keylogger

Spiegel.de provided a copy of a malicious program codenamed ?QWERTY?, supposedly used by several governments in their CNE operations. Looking at the code closely, we conclude that the ?QWERTY? malware is identical in functionality to the Regin 50251 plugin.
Source: Comparing the Regin module 50251 and the "Qwerty" keylogger