They state they are a genuine company, and I quote the CEO said in a message “ We do not tolerate malicous usage of our services and oprrating pro-actively to prevent our costumers from abuse” however the details regarding this are listed on a number of sites similar to ours, and it seems others have been contacted also, such as KrabsOnSecurity (details here).

We have been contacted twice now, by the company that created RevCode. Revcodeeu – This is a genuine company but for some reason it is listed on a number of sites as been a C2 domain for this trojan. The owner of a Swedish company behind a popular remote administration tool (RAT) implicated in thousands of malware attacks shares the same name as a Swedish man who pleaded guilty in 2015 to.

Monitor and edit registry and file system entries.

Dump RAM and cache memory data to a C2 server.

Harvesting browser and mail credentials.

Kada se preuzme i instalira WebMonitor alatka napadai dobijaju pristup. Pretpostavlja se da linkovi za preuzimanje do rtava stiu preko phishing mejlova i drugih malicioznih poruka. Although C2 communication is over HTTPS, an obvious downside to such a C2 domain architecture is that the C2 traffic is easily detected and blocked based upon the domains.Īs a RAT, WebMonitor has an extensive list of capabilities including: Bezbednosni eksperti upozoravaju da se radi o lanom Zoom downloader-u, koji do rtava dolazi sa malicioznih web-sajtova, a ne od nekog zvaninog izvora. WebMonitor C2s to virtual-hostnames, apparently unique to each customer, at one of two root C2 domains. Web : ( which claims to be The Net's most comprehensive database on the activities of multinational corporations ) Earth. The RAT is a service bundled with a VPN, C2 service, and a web-based interface.

WebMonitor is a remote access trojan with added virtual private network (VPN) and command and control (C2) capabilities.Īt present it is unclear how WebMonitor is delivered although there are indications on a number of dark web sites it is offered on that it is being distributed via spam campaigns.

Web monitor rat