#CelasTradePro

Malware/Tool

2018-08-15 • Brief Analysis on APT Attack through Cryptocurrency Trading Software

A trojanized Windows and macOS cryptocurrency-trading application modeled on Qt Bitcoin Trader. Its embedded updater backdoor collects process, computer, and system information, sends the encrypted data to a server, and executes malicious code returned by the server.

Tagged Reports

2021-02-17
USCISA
#AppleJeus #Lazarus #HiddenCobra #FALLCHILL #macOS #CelasTradePro
2021-02-17
USCISA
#AppleJeus #T1573 #T1059.002 #T1588.004 #T1059.004 #T1027 #T1583.006 #T1543.003 #T1053.004 #T1548 #T1573.001 #T1587.001 #T1041 #T1564.001 #T1053.005 #T1588.003 #T1204.002 #T1071.001 #T1543.004 #T1547 #T1583.001 #T1033 #T1566.002 #T1059 #Lazarus #HiddenCobra #CelasTradePro #JMTTrading #UnionCryptoTrader #KupayWallet #CoinGoTrade #Dorusio #Ants2Whale #FALLCHILL
2020-03-02
UN
#Sanctions #ITWorker #KKNPP #DTrack #CelasTradePro #Anchor
2018-08-15
Qihoo360
#APT-C-26 #CelasTradePro
2018-08-15
Qihoo360
#APT-C-26 #AppleJeus #CelasTradePro
« Back