Tricks and COMfoolery: How Ursnif (Gozi) Evades Detection

In February we saw a resurgence of Ursnif (also known as Gozi), a credential-stealing Trojan. Learn how Ursnif bypasses an attack surface reduction rule.

Wireshark Tutorial: Examining Ursnif Infections

Ursnif Trojan - Malware removal instructions (updated)

Windows Management Instrumentation, Technique T1047 - Enterprise

Ursnif malware switches from bank account theft to initial access

Wireshark Tutorial: Examining Ursnif Infections

Ursnif Trojan - Malware removal instructions (updated)

Wireshark Tutorial: Examining Ursnif Infections

Ursnif aka Gozi Malware analysis with ANY.RUN malware sandbox

Wireshark Tutorial: Examining Ursnif Infections

Wireshark Tutorial: Examining Ursnif Infections

Ursnif aka Gozi Malware analysis with ANY.RUN malware sandbox