Travelling to the far side of Andromeda

Botconf 2015
2023-04-28 | 09:50 – 10:30

Jose Miguel Esparza 🗣

Andromeda, also known as Gamarue by some Antivirus vendors, is a popular and modular bot active since 2011. It is normally used to spread additional malware, but sometimes, depending on the criminals, the main objective could be just stealing user credentials. After almost five years of life its development has not stopped. The people behind it keep maintaining it and adding functionalities, like new anti-analysis routines, changes in the communication encryption, new request formats, etc.

Slides Icon

Scroll to Top