Niteris

CottonCastle - Status: Unknown - Last seen: 2015-11

References:

Meet Niteris EK (formerly known as CottonCastle) - 2014-06-09 - MDNC - Kafeine Niteris Buhtrap

Another look at Niteris : post exploitation WMI and Fiddler checks - 2015-05-12 - MDNC - Kafeine Niteris Nuclear CVE-2014-0569 CVE-2014-6332

More Reading:

Swiss Advertising network compromised and distributing a Trojan - 2015-09-22 - GovCERT.ch - GovCERT.ch Niteris Gozi ISFB