MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity

PWOBot added

pull/4/head
Alexandre Dulaunoy 2016-04-21 09:51:50 +02:00
parent 3faaaf657a
commit 98e2dedd7d
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
elements/threat-actor-tools.json
View File

@ -33,6 +33,11 @@
"description": "Android-based malware", "description": "Android-based malware",
"synonyms": ["GM-Bot", "Acecard"] "synonyms": ["GM-Bot", "Acecard"]
}, },
{
"value": "PWOBot",
"description": "We have discovered a malware family named ‘PWOBot’ that is fairly unique because it is written entirely in Python, and compiled via PyInstaller to generate a Microsoft Windows executable. The malware has been witnessed affecting a number of Europe-based organizations, particularly in Poland. Additionally, the malware is delivered via a popular Polish file-sharing web service.",
"refs": ["http://researchcenter.paloaltonetworks.com/2016/04/unit42-python-based-pwobot-targets-european-organizations/"]
},
{ {
"value": "Lstudio" "value": "Lstudio"
}, },