http://www.forensicswiki.org/w/index.php?title=Win32.Shiz&feed=atom&action=history 2013-05-21T09:18:31Z Revision history for this page on the wiki MediaWiki 1.20.3 http://www.forensicswiki.org/w/index.php?title=Win32.Shiz&diff=10754&oldid=prev 2011-03-29T17:16:30Z

<p></p> <table class='diff diff-contentalign-left'> <col class='diff-marker' /> <col class='diff-content' /> <col class='diff-marker' /> <col class='diff-content' /> <tr style='vertical-align: top;'> <td colspan='2' style="background-color: white; color:black;">← Older revision</td> <td colspan='2' style="background-color: white; color:black;">Revision as of 17:16, 29 March 2011</td> </tr><tr><td colspan="2" class="diff-lineno">Line 10:</td> <td colspan="2" class="diff-lineno">Line 10:</td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>=== In Russian ===</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>=== In Russian ===</div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>* [http://www.nobunkum.ru/issue003/banker-attacks/ Attacks on online banking systems]</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>* [http://www.nobunkum.ru/issue003/banker-attacks/ Attacks on online banking systems]</div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">=== English ===</ins></div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">* [http://www.threatexpert.com/report.aspx?md5=826c855b440611a944e25f072a533ea3 ThreatExpert Report]</ins></div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>[[Category: Malware]]</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>[[Category: Malware]]</div></td></tr> </table>

Keydet89 http://www.forensicswiki.org/w/index.php?title=Win32.Shiz&diff=10753&oldid=prev 2011-03-23T21:12:23Z

<p>Created page with &quot;{{expand}} &#039;&#039;Win32.Shiz&#039;&#039; (other name: &#039;&#039;Trojan.PWS.Ibank&#039;&#039;) is a malicious program designed for online banking fraud. Current versions of this program support almost all onlin...&quot;</p> <p><b>New page</b></p><div>{{expand}}<br /> <br /> ''Win32.Shiz'' (other name: ''Trojan.PWS.Ibank'') is a malicious program designed for online banking fraud.<br /> <br /> Current versions of this program support almost all online banking systems in Russian Federation (BS-Client, Sberbank, etc) as well as many online poker clients.<br /> <br /> The program can be used to steal usernames and passwords used to access online banking system, cryptographic keys stored as files (e. g. on USB Flash drives or hard disk drives), URLs used to access online banking system and certificates stored in web-browsers. If online banking system uses access control lists based on IP addresses then Win32.Shiz can set up a SOCKS proxy-server on a compromised computer.<br /> <br /> == Links ==<br /> === In Russian ===<br /> * [http://www.nobunkum.ru/issue003/banker-attacks/ Attacks on online banking systems]<br /> <br /> [[Category: Malware]]</div>

.FUF