A forum for reverse engineering, OS internals and malware analysis 

Forum for analysis and discussion about malware.
 #17301  by hnpl2011
 Thu Dec 20, 2012 3:51 am
Linux / Chapro.A ( Eset)be found on the Apache webserver. Malware execute on Linux x64 operating system.
The main purpose Linux / Chapro.A insert iframes to the website are located in the server. This iframe point to the page containing the exploit code "Sweet Orange exploit toolkit", then download variations of Zeus - known ability to steal bank account information.
Article:
http://blog.eset.com/2012/12/18/malicio ... uxchapro-a
https://www.securelist.com/en/blog/208193935/
Attachments
(16.76 KiB) Downloaded 68 times