Uma análise do Sykipot, um bot usado em ataques dirigidos (spear phishing).
Detailed Analysis Of Sykipot (Smartcard Proxy Variant)
On January 2012, AlienVault reported a Sykipot variant with smartcard access capability that has drawn high attention in the security industry. The internals of this malware sample, such as flow of the malware, backdoor capabilities, tricks and techniques, and encryption algorithm are described in this paper. Additionally, its backdoor capabilities are compared with the analysis work of another Sykipot variant published by Symantec. This comparison displays the vast improvements that Sykipot has made. (...)