p0sT5n1F3r (Malware Family)

SYMBOL	COMMON_NAME	aka. SYNONYMS

elf.p0st5n1f3r (Back to overview)

p0sT5n1F3r

According to Yarix digital security, this is a malware that allows to sniff on HTTPS traffic, implemented as Apache module.

References

2019-10-01 ⋅ vargroup ⋅ Mario Ciccarelli
p0sT5n1F3r - Reverse Engineering of a breach
p0sT5n1F3r

There is no Yara-Signature yet.

Propose Change for elf.p0st5n1f3r

In which category would you like to suggest a change?

What would you like to do?

New Alias for elf.p0st5n1f3rPlease enter a new alias that you think is appropriate for p0sT5n1F3r. Give a reference for the alias in the box below.

New directory name for elf.p0st5n1f3rPlease enter your proposal for a new primary family name that you think is more appropriate than elf.p0st5n1f3r.

New Common Name for elf.p0st5n1f3rPlease enter your proposal for a new primary family name that you think is more appropriate than p0sT5n1F3r.

What would you like to do?

Add DescriptionThe Family description will be visible on the family details site.

Change DescriptionChange the existing description like you think it would be advisable.

If your designated proposal does not fit in any other category,
feel free to write a free-text in the comment field below.
Changes regarding references should be proposed on the Malpedia library page.

What would you like to do?

New Actor for elf.p0st5n1f3r

Which actor do you think should be removed?

Explanation / ReferenceWhy do you think this change is advisable? Feel free to include references.

Your suggestion will be reviewed before being published.
Thank you for contributing!

Propose Change of Library Entry

URL

Title

Authors

Language

Date Please use YYYY-MM-DD, YYYY-MM, or YYYY.

Organization (optional)

Referenced families (optional)

Comment Add additional information to explain your proposal.

Your suggestion will be reviewed before being published.
Thank you for contributing!

p0sT5n1F3r Propose Change

References

p0sT5n1F3r