Pony / Zbot / Zeus / Fareit – Bad Useragent

Look for this UA on your network.

Both GETs and POSTs

Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)

References:
https://www.virustotal.com/file/e5248139d085b176997c2f044287d9d13c995cf5e2c375b232a9d49344008f53/analysis/
https://www.virustotal.com/file/8d0fdff40102d391be01552bd88ec18c4fcd583fb41d1442880ece098af8fe80/analysis/
https://www.virustotal.com/file/135a86c0f3480b313bff740c6cb8c30ca0a19075ad59c8e034066ffb6ee2a440/analysis/
http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=Win32/Fareit

Comments are closed.