Trusted Design

An Update on the UrlZone Banker

概要

UrlZone is a banking trojan that appeared in 2009. Searching its name or one of its aliases (Bebloh or Shiotob) reveals a good deal of press from that time period along with a few technical analyses in 2009 [1] [2], 2012 [3], and 2013 [4]. Despite having a reputation of evolution, there doesn’t seem to be very many recent updates on this malware family though. Is UrlZone still a threat and if so, how has it changed?

Created: 2026-02-23

Indicators

類似Pulses

Updated Blackmoon banking Trojan (score: 0.61)
PROOFPOINT 2016-02-05: Vawtrak and UrlZone Banking Trojans (score: 0.61)
BEBLOH Expands to Japan in Latest Spam Attack (score: 0.57)
Shifu: New Banking Trojan Is Attacking 14 Japanese Banks (score: 0.56)
The Curious Case of an Unknown Trojan Targeting German-Speaking Users (score: 0.56)

このPulseに関連する脅威アクター (事実ベース)

FIN7

Score: 4.69

Matched TTPs:

T1588.001 - Malware
T1578.001 - Create Snapshot

MITREへのリンク →

UNC3886

Score: 4.69

Matched TTPs:

T1588.001 - Malware
T1578.001 - Create Snapshot

MITREへのリンク →

ZIRCONIUM

Score: 4.69

Matched TTPs:

T1588.001 - Malware
T1578.001 - Create Snapshot

MITREへのリンク →

Higaisa

Score: 4.69

Matched TTPs:

T1588.001 - Malware
T1578.001 - Create Snapshot

MITREへのリンク →

Lazarus Group

Score: 8.82

Matched TTPs:

T1588.001 - Malware
T1055.005 - Thread Local Storage
T1578.001 - Create Snapshot

MITREへのリンク →

Equation

Score: 4.13

Matched TTPs:

T1130 - Install Root Certificate

MITREへのリンク →

Strider

Score: 4.13

Matched TTPs:

T1130 - Install Root Certificate

MITREへのリンク →

Mustard Tempest

Score: 4.54

Matched TTPs:

T1543.002 - Systemd Service

MITREへのリンク →

Mustang Panda

Score: 4.13

Matched TTPs:

T1055.005 - Thread Local Storage

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Lazarus Group

Score: 0.80

Matched TTPs:

T1588.001 - Malware
T1578.001 - Create Snapshot
T1055.005 - Thread Local Storage

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る