From 14024efbf14c74f47f8345ef33082678f1a9d2ca Mon Sep 17 00:00:00 2001
From: Deborah Servili <deborah.servili@gmail.com>
Date: Wed, 5 Sep 2018 09:19:35 +0200
Subject: [PATCH] add CamuBot Banker Trojan

---
 clusters/banker.json | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/clusters/banker.json b/clusters/banker.json
index 072777b..9d21213 100644
--- a/clusters/banker.json
+++ b/clusters/banker.json
@@ -828,7 +828,17 @@
       },
       "uuid": "5b42af8e-8fdc-11e8-bf48-f32ff64d5502",
       "value": "Kronos"
+    },
+    {
+      "value": "CamuBot",
+      "description": "A newly discovered banking Trojan departs from the regular tactics observed by malware researchers by choosing visible installation and by adding social engineering components.\nCamuBot appeared last month in Brazil targeting companies and organizations from the public sector. The victim is the one installing the malware, at the instructions of a human operator that pretends to be a bank employee.",
+      "meta": {
+        "refs": [
+          "https://www.bleepingcomputer.com/news/security/new-banking-trojan-poses-as-a-security-module/"
+        ]
+      },
+      "uuid": "2fafe8b2-b0db-11e8-a81e-4b62ee50bd87"
     }
   ],
-  "version": 12
+  "version": 13
 }