Danabot

References:
  • DanaBot - A new banking Trojan surfaces Down Under - 2018-05-31 - Proofpoint - Proofpoint Staff Danabot CryptXXX
  • DanaBot control panel revealed - 2019-03-13 - Proofpoint - Dennis Schwarz - Proofpoint Staff Danabot
  • DanaBot Demands a Ransom Payment - 2019-06-20 - Checkpoint - Yaroslav Harakhavik - Aliaksandr Chailytko Danabot NonRansomware
  • More Reading:

  • DanaBot Riding Fake MYOB Invoice Emails - 2018-07-16 - SpiderLabs - Dr. Fahim Abbasi - Diana Lopera Danabot
  • DanaBot shifts its targeting to Europe, adds new features - 2018-09-21 - Eset - ESET Research Danabot
  • DanaBot updated with new C&C communication - 2019-02-07 - Eset - ESET Research Danabot
  • Combing Through Brushaloader Amid Massive Detection Uptick - 2019-02-20 - Talos - Nick Biasini - Edmund Brumaghin - Edmund Brumaghin - Matthew Molyett BrushaLoader Danabot
  • Does anyone know which ransomware family is this? Was pushed via Danabot botnet id 5 this morning. Delphi executable, internally called "Ghost". - 2019-06-07 - Twitter - Sandor Nemes Danabot Buran
  • BrushaLoader still sweeping up victims one year later - 2019-07-22 - Proofpoint - Kafeine - Proofpoint Staff BrushaLoader Danabot Gootkit TA544
  • SystemBC is like Christmas in July for SOCKS5 Malware and Exploit Kits - 2019-08-01 - Proofpoint - Kade Karmon - Kafeine - Dennis Schwarz - Proofpoint Staff SystemBC Fallout RIG Danabot PowerEnum