Gustuff: Weapon of Mass Infection
Excerpt
“Serious product for individuals with skills and experience,” — that’s how Gustuff was advertised by its seller nicknamed Bestoffer on an underground forum in December 2018. Although the Trojan was developed by a Russian-speaking cybercriminal, Gustuff operates exclusively on international markets. The list of its potential targets includes users of Android apps of top international banks, crypto wallets and popular ecommerce websites. Gustuff is a new generation of malware complete with fully automated features designed to steal both fiat and crypto currency from user accounts en masse. Group-IB’s malware analyst, Ivan Pisarev, breaks down how he researched Gustuff.
Intro
Group-IB’s Threat Intelligence system fi…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Group-IB on group-ib.com.
Mentioned in the excerpt
More from Group-IB28
- Stray Cat, Open Doors: How k0t Wanders Through the Network EdgeGroup-IB · Published 21 Oct
- BlogGroup-IB · Published 15 Dec 2022
- Anatomy of BraZetsu: How Cybercriminals Fuel the Underground EcosystemGroup-IB · Published 31 Aug
- JadeProx: Tracing a China-nexus Operation Through an OPSEC MistakeGroup-IB · Published 23 Jul
On the same topics
- Lorem Ipsum Revisited: ClickFix Pivot & Rapid BrigantineBlueVoyant · Added 25 Oct
- From PostCSS Masquerading to Windows RATJFrog · Published 22 Jun
- Showboat Malware: Emerging Threats Targeting Telecom ProvidersLumen Black Lotus Labs · Added 25 Oct
- International law enforcement initiate hunt on malware group SocGholishDutch National Police · Published 18 Jun
