Tricks and COMfoolery: How Ursnif (Gozi) Evades Detection

In February we saw a resurgence of Ursnif (also known as Gozi), a credential-stealing Trojan. Learn how Ursnif bypasses an attack surface reduction rule.

Wireshark Tutorial: Examining Ursnif Infections

Wireshark Tutorial: Examining Ursnif Infections

Use behavioral analysis to detect a new Ursnif banking Trojan campaign in Japan

Digital banking fraud: how the Gozi malware works

Ursnif Malware Banks on News Events for Phishing Attacks

Unwrapping Ursnifs Gifts - The DFIR Report

Use behavioral analysis to detect a new Ursnif banking Trojan campaign in Japan

Wireshark Tutorial: Examining Ursnif Infections

Ursnif Malware Banks on News Events for Phishing Attacks

Gozi: The Malware with a Thousand Faces - Check Point Research

Wireshark Tutorial: Examining Ursnif Infections