The Gozi Trojan has improved dramatically since SecureWorks researcher Don Jackson downloaded the first known sample in February 2007. Gozi split up keywords and strings of code in the downloader so that the pattern that defensive technologies normally would recognize didn’t exist. The person controlling the Gozi bot can send it updated instructions or add features and functionality to it anonymously and invisibly. “They didn’t have to be so advanced with Gozi but now they are,” Jackson says. “It will only get more advanced over time””]
Source: https://www.csoonline.com/article/2123338/how-gozi-s-first-second-unfolds.html