Remove 2011 Remove Architecture Remove Backups Remove Spyware
article thumbnail

FinSpy: unseen findings

SecureList

Kaspersky has been tracking deployments of this spyware since 2011. The 32-bit Trojan Loader, which is launched regardless of the victim machine architecture, checks if it is running on a 64-bit system. This script determines the victim machine architecture. The Trojan Loader. eq 0 ];then rm -rf "$0" fi exit 0.