Malware
malware:gameover_zeus
Also: Gameover
Peer-to-peer-capable ZeuS version used in large-scale banking fraud and described as highly resilient against takedowns.
Peer-to-peer-capable ZeuS version used in large-scale banking fraud and described as highly resilient against takedowns.
“that version was called Gameover ZeuS”
“Gameover ZeuS was the most effective and successful version of ZeuS yet.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | VARIANT_OF | ZeuS Version 3 | Explicit | 111 |
| outgoing | USES | peer-to-peer capability | Explicit | 111 |
| outgoing | ATTRIBUTED_TO | Evgeniy Bogachev | Explicit | 111 |
| outgoing | USES | sinkholing | Explicit | 111 |
| incoming | INVOLVES | Operation Clean Slate | Explicit | 111 |
Gameover ZeuS VARIANT_OF ZeuS Version 3
Gameover ZeuS developed from a newer version of ZeuS that added peer-to-peer capability.
Explicit Confidence 96% · Jack Rhysider EP 111 Details
“this would soon develop into a new version of ZeuS which had peer-to-peer capability, and that version was called Gameover ZeuS”
Gameover ZeuS USES peer-to-peer capability
Gameover ZeuS had peer-to-peer capability.
Explicit Confidence 99% · Jack Rhysider EP 111 Details
“Gameover ZeuS ... had peer-to-peer capability”
Gameover ZeuS ATTRIBUTED_TO Evgeniy Bogachev
The FBI charged Evgeniy Bogachev with being an administrator of the Gameover ZeuS botnet.
Explicit Confidence 99% · James Cole EP 111 Details
“Evgeniy Bogachev, a Russian national, has been indicted in Pittsburgh, Pennsylvania for his role as an administrator of the Gameover ZeuS botnet”
Operation Clean Slate INVOLVES Gameover ZeuS
Operation Clean Slate was the operation associated with the coordinated disruption of the Gameover ZeuS botnet.
Explicit Confidence 99% · Bob Anderson EP 111 Details
“Today’s actions are part of an operation called Clean Slate”
“Gameover ZeuS investigation”
Gameover ZeuS USES sinkholing
Gameover ZeuS was subjected to coordinated sinkholing attempts, although the attempts did not fully take down the botnet.
Explicit Confidence 88% · Jack Rhysider EP 111 Details
“the coordinated sinkholing of domains was executed, but it did not take down the ZeuS botnet”