Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: Gameover Zeus reported as "returned from the dead" - SANS Internet Storm Center SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Gameover Zeus reported as "returned from the dead"

As reported by Sophos and submitted by multiple ISC readers (thank you), Gameover Zeus is resurfacing.

According to the Sophos post, they have "only seen a few samples of the new version, but it has been distributed through widespread spam campaigns, so the number of infections may already be large. Typical Gameover spams include an attachment pretending to be an account statement."

Malcovery has a related post for your review as does StopMalvertising.

If you spot what you belief are related SPAM samples or actual binaries, please send them our way for analysis.

Russ McRee | @holisticinfosec

Russ McRee

204 Posts
ISC Handler
Jul 18th 2014

Sign Up for Free or Log In to start participating in the conversation!