[CyberAbuse] New trojan, Magisterium

[Philippe Bourcier <philippe () CYBERABUSE ORG>]

Hi,

Magisterium is a new trojan for Win controlled on IRC with crypted commands.
We don't know a lot more about it.
But there is already a total of 300 boxes.

Also, one of the hacker, probably the leader said :
I can distro to over 20 people in one day on gnutella
...

We have no binaries yet.

Here is a sample of the crypted messages it does :
> CÜLí3g1h,o1y1z0};R8p4aFüZx94s.\iZ]
> CÜLí1~1|,o1S1x0t;7g3RFüZfi;rdC8\
> CÜLì9q3s,y1P1w3~;o1g5wFüZmi8rNC;\
> CÜLì8x3u,~1x1u1W;Q8n2}FüZei5rSCQ\
> CÜLì7M3o,i1i1s3u;R7i3lFüZPi.r^Cb\
> CÜLí0p1b,`1x1v0T;m6e1jF

You can see the list of hacked machines at
http://www.documents.cyberabuse.org/?doc=16.


The CyberAbuse AntiHack project
----------------------------------------------
www.documents.cyberabuse.org