Trusted Design

GozNym Malware

概要

The new GozNym hybrid takes the best of both the Nymaim and Gozi ISFB malware to create a powerful Trojan. From the Nymaim malware, it leverages the dropper’s stealth and persistence; the Gozi ISFB parts add the banking Trojan’s capabilities to facilitate fraud via infected Internet browsers. The end result is a new banking Trojan in the wild.

Created: 2026-02-23

Indicators

• domain - kustitoop.com -
• FileHash-SHA256 - c58d987be377e4fa3d512a21fdb522bd894b8d91536330a9abebbb461fd093b7 -
• domain - mbcqjsuqsd.com -
• domain - carsi12.com -
• FileHash-SHA256 - 55f9cd6cbed53ccc26d6d570807a18f91d9d8c10db352524df424f356d305a6e -
• FileHash-SHA256 - eb10ec30f2fec3830daee6ad502e527ad6ef67e4591d545b1a84dde300b3edb5 -

類似Pulses

• GozNym: The Banking Malware (score: 0.91)
• Hybrid Trojan Goznym Emerges (score: 0.84)
• ATMZombie: banking trojan in Israeli waters (score: 0.63)
• Hijacked Existing E-mail Thread - Ursnif (aka Gozi aka Gozi ISFB) Malware Phishing (score: 0.63)
• Gootkit banking Trojan jumps the Channel (score: 0.62)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る