Kronos devouring its children
ID: 118de718-bac3-55ca-9141-887233e0d58a
STIX ID: report--118de718-bac3-55ca-9141-887233e0d58a
Feed Name: Group-IB Blog
The report details the Kronos banking Trojan (advertised on underground forums and used in 2014–2015) which infected bank customers via phishing (delivering a taxes.exe) and stole funds using browser web-injects; Group-IB accessed the Kronos control panel and traced thefts to accounts of two Russian companies and likely mule cashouts. It further recounts the FBI investigation connected to AlphaBay that led to an indictment alleging Marcus Hutchins (MalwareTech) co-authored and promoted Kronos, culminating in his arrest and conditional release on bail.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.