2011, Data collection, Encryption and Spyware

FinSpy: unseen findings

SecureList

SEPTEMBER 28, 2021

Kaspersky has been tracking deployments of this spyware since 2011. Both of them are encrypted with RC4. All communications between the server are encrypted with RC4. The Trojan’s Cryptography Library to encrypt/decrypt exchanged data. The encrypted VFS file. Names differ between samples.

Encryption

Encryption Malware Spyware Architecture

Cyber Security Informer

FinSpy: unseen findings

Webinars

Stay Connected