Johannes Bacher's reversing efforts
| Subfolder | Malware Family | Alias | Write-Up |
|---|---|---|---|
| pizd | ?? | [link] (https://blog.avast.com/2013/06/18/your-facebook-connection-is-now-secured/) | |
| newgoz | newGOZ | Gameover Zeus, Peer-to-Peer Zeus | link |
| ramnit | Ramnit | link | |
| shiotob | Shiotob | Urlzone, Bebloh | link |
| symmi | Symmni | link | |
| banjori | Banjori | MultiBanker 2, BackPatch(er) | link |
| necurs | Necurs | link | |
| dircrypt | DirCrypt | link | |
| pykspa/precursor | Precursor of Pykspa | link | |
| pkyspa/improved | Improved Pykspa | link | |
| simda | Simda | Shiz | link |
| tinba | Tinba | TinyBanker, Zusy | link |
| ranbyus/may | Ranbyus Version 1 | link | |
| ranbyus/september | Ranbyus Version 2 | link | |
| nymaim | Nymaim | ||
| murofet/v1 | Murofet Variant 1 | LICAT | link |
| murofet/v2 | Murofet Variant 2 | LICAT | link |
| murofet/v3 | Murofet Variant 3 | LICAT | link |
| fobber | Fobber | Tinba v3 | |
| corebot | CoreBot | link |