Stalking the Zeus Banking Trojan – http botnet

The ZeuS family of banking trojans remains probably one of the most serious threats to the end user in today’s Internet. In this talk we will cover some history of the evolution of the trojan, its inner workings and how it looks today. An overview of our experiences in analysing the trojan and ZeuS botnets will be given, with particular focus on ZiTMo and the latest ZeuS P2P variants. We will also show how cooperation between various stakeholders in Poland allowed for a quick and accurate assessment of a ZiTMo outbreak in early 2011, in spite of some histerical media hype surrounding the event. Finally, a comparison will also be made with its great rival — SpyEye.