Trusted Design

ZeusVM: Bits and Pieces

概要

ZeusVM is a relatively new addition to the Zeus family of malware. Like the other Zeus variants, it is a banking trojan (“banker”) that focuses on stealing user credentials from financial institutions. Although recent attention has been on non-Zeus based bankers such as Neverquest and Dyreza, ZeusVM is still a formidable threat. At the time of this writing, it is actively being developed and has implemented some interesting features such as a custom virtual machine and basic steganography. In addition, due to a recent leak of a builder program, the ability to create new ZeusVM campaigns is now in the hands of many more miscreants. To foster a better understanding of ZeusVM, the attached paper examines some of the internals of the malware from a reverse engineer’s perspective. While it doesn’t cover every component, the visibility provided can help organizations better detect and protect from this threat. From https://asert.arbornetworks.com/zeusvm-bits-and-pieces/

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• ZeuS banking Trojan distributed via MSG attachments (score: 0.63)
• Stegoloader: A Stealthy Information Stealer (score: 0.62)
• Zeus Malware Hashes (score: 0.61)
• Ramnit – in-depth analysis (score: 0.59)
• Win32.Bolik.1 - Bolik Banking Trojan (score: 0.58)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る