Carberp 2013 Code Leak
The aim of this repo is to simplify access to those who want to study it, includes:
- Source code of the Carberp botnet leaked on some Russian underground forums, nothing has been touched (even though all the executables, builders and password protected files were deleted, contact me if you need them).
- Admin Panel
- translations
- http://2011.zeronights.org/files/alexandermatrosoveugenerodionov-moderntechnologiesinmalwareprogramsdevelopingforrbssystems-111202040302-phpapp01.pdf
- http://go.eset.com/us/resources/white-papers/carberp.pdf
- http://go.eset.com/us/resources/white-papers/Hodprot-Report.pdf
- http://go.eset.com/us/resources/white-papers/CARO_2011.pdf
- http://krebsonsecurity.com/2013/06/carberp-code-leak-stokes-copycat-fears/
- http://malware.dontneedcoffee.com/2012/12/carberprenaissance.html
- http://malwareint.blogspot.co.uk/2011/02/inside-carberp-botnet.html
- http://pxnow.prevx.com/content/blog/carberp-a_modular_information_stealing_trojan.pdf
- https://blogs.technet.microsoft.com/mmpc/2013/11/20/carberp-based-trojan-attacking-sap/
- https://securelist.com/blog/incidents/32036/carberp-its-not-over-yet-2/
- https://securelist.com/blog/virus-watch/57658/carberp-in-the-mobile/
- https://securityintelligence.com/carberp-source-code-sale-free-bootkit-included/
- https://securityintelligence.com/carberp-steals-e-cash-vouchers-facebook-users/
- https://web.archive.org/web/20111004014029/http://www.trusteer.com/sites/default/files/Carberp_Analysis.pdf
- https://web.archive.org/web/20120315132632/http://quequero.org/Carberp_Reverse_Engineering
- https://web.archive.org/web/20120503023819/http://www.malwareint.com/docs/inside-carberp-botnet-en.pdf
- https://www.fox-it.com/en/files/2014/12/Anunak_APT-against-financial-institutions2.pdf
- http://www.xylibox.com/2013/06/carberp-archive.html
- https://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=Win32%2fCarberp
- http://www.infospyware.net/blog/carberp-silent-trojan-eventual-successor-to-zeus/
- http://www.rsaconference.com/writable/presentations/file_upload/ht-t06-dissecting-banking-trojan-carberp_copy1.pdf
- http://www.welivesecurity.com/2011/08/23/hasta-la-vista-bootkit-exploiting-the-vbr/
- http://www.welivesecurity.com/2011/11/21/evolution-of-win32carberp-going-deeper/
- http://www.welivesecurity.com/2011/12/04/carberp-blackhole-growing-fraud-incidents/
- http://www.welivesecurity.com/2012/02/22/rovnix-reloaded-new-step-of-evolution/
- http://www.welivesecurity.com/2012/03/20/win32carberp-gang-on-the-carpet/
- http://www.welivesecurity.com/2012/03/30/blackhole-cve-2012-0507-and-carberp/
- http://www.welivesecurity.com/2012/05/24/carberp-gang-evolution-at-caro-2012/
- http://www.welivesecurity.com/2012/06/04/carberp-and-hodprot-six-more-gang-members-held/
- http://www.welivesecurity.com/2012/06/05/smartcard-vulnerabilities-in-modern-banking-malware/
- http://www.welivesecurity.com/2012/07/02/all-carberp-botnet-organizers-arrested/
- http://www.welivesecurity.com/2012/07/27/rovnix-d-the-code-injection-story/
- http://www.welivesecurity.com/2013/03/25/carberp-the-never-ending-story/
- http://www.welivesecurity.com/wp-content/media_files/Carberp-Evolution-and-BlackHole-public.pdf
- Spam Nation book by Brian Krebs