Blog | G5 Cyber Security

June 5 Twitter Bifrost spreader h1.ripway.com and some others

This is a very prolific twitter malware generator using approximately 70-100 twitter accounts (as of 5pm June 5, 2010) and their number is growing fast. The malware appears to be Bifrost, many binaries are different MD5, different detection rate, and callback IPs. The subjects and languages of the twitter posts are different too too.Download 6 samples (some are listed below, all are versions of the same trojan) as a password protected archive (contact me if you need the password)”]

Source: http://contagiodump.blogspot.com/2010/06/june-5-twitter-bifrost-spreader.html

Exit mobile version