notes

The DGA of Qakbot.T

Qakbot, Akbot or Qbot is an older banking trojan from 2009 that underwent multiple modifications ...

read

Phorpiex - An IRC wormFull reversal for the fun of it

Phorpiex is a worm controlled over IRC. It can be instructed to do mainly three things: (1) download...

read
notes

The DGA in Alureon/DNSChanger

At least some of the famous DNSChanger malware samples use a domain generation algorithm (DGA) to...

read

Kraken's two Domain Generation AlgorithmsA side by side comparison of the DGAs

Kraken (also known as Oderoor or Bobax) was once a large, if not the largest, botnet. It was primarily...

read