ZBOT - Trend Labs shares detailed analysis

Trend provides an in-depth technical review of this latest ZBOT trojan which is a highly advanced malware attack.

Full Analysis of the ZeuS-LICAT Trojan
http://blog.trendmicro.com/full-analysis-of-the-zeus-licat-trojan/

QUOTE: Last September, several individuals were arrested for using information-stealing Trojans created with the well-known ZeuS toolkit. Following this, security researchers anticipated the inevitable “upgrade” to the toolkit/Trojans that will allow cybercriminals to continue their money-making ploy. Soon enough, we received reports on a ZeuS Trojan Trend Micro detects as TSPY_ZBOT.BYZ with the following new features:

We have been chronicling our findings about TSPY_ZBOT.BYZ, the ZeuS Trojan with LICAT features, in the following entries:

• File-Patching ZBOT Variants: ZeuS 2.0 Levels Up,”
• File Infector Uses Domain Generation Technique Like DOWNAD/Conficker
• ZeuS Ups the Ante with LICAT
• ZeuS’ Response to Automated Analysis
• The Plot Thickens for ZeuS-LICAT
• ZeuS, Still a Threat; Now Also Spreading Through LICAT