ThaiCERT    ETDA    MDES
Report
Search
Home > List all groups > List all tools > List all groups using tool XBOT-POS

Threat Group Cards: A Threat Actor Encyclopedia

Permanent link Tool: XBOT-POS

NamesXBOT-POS
CategoryMalware
TypePOS malware, Credential stealer
Description(benkow) The bot ad:
Selling xbot ,new bank trojan -- Modules -- Webinject -- Formgrabber -- Socket4/5 -- Hidden VNC
New bot bank xbot is available for rent (800$/monthly) -- server on tornetwork/clearnet
Customized programming service and web developer/c/c++/Python/NET/others
Team Coder/NZMR
xbot costs 3k $ modules available >webinject -- formgrabber -- Socket4/5 -- Hidden VNC
When buying xbot what do you get?
You will get the builder,bin/exe+socket.exe/server.exe hvnc
[+] - Free installation on your server in tornetwork or clearnet, you choose
[+] - monthly support paid 100 $ (you choose,with or without support)
[+] - Update bot for new version 400 $
[+] Rent xbot
Panel access (Clearnet/Tornetwork)
Bin (exe)
Socket.exe/hvnc.exe
Pri├že
800 $ monthly (First 6 customers, others 1k $)
Support monthly 100 $ (btc)
Information<https://benkowlab.blogspot.com/2017/08/quick-look-at-another-alina-fork-xbot.html>
Malpedia<https://malpedia.caad.fkie.fraunhofer.de/details/win.xbot_pos>

Last change to this tool card: 22 May 2020

Download this tool card in JSON format

Previous: Xbash
Next: XBOW

All groups using tool XBOT-POS

ChangedNameCountryObserved

Unknown groups

 _[ Interesting malware not linked to an actor yet ]_ 

1 group listed (0 APT, 0 other, 1 unknown)

Thailand Computer Emergency Response Team (ThaiCERT)
Electronic Transactions Development Agency

Follow us on

Facebook Twitter

Report incidents

Telephone +66 (0)2-123-1234
E-mail report@thaicert.or.th
PGP Download PGP key