Home Malware Programs Malware TeamSpy

TeamSpy

Posted: March 27, 2013

Threat Metric

Threat Level: 2/10
Infected PCs: 2
First Seen: March 27, 2013
OS(es) Affected: Windows

TeamSpy is a spying malware threat that is included in a cyber-espionage malware attack. TeamSpy uses legal programs together with commodity malware devices, and attacks government intelligence organizations, heavy industries and political activists in numerous countries of Eastern Europe. TeamSpy installs a legal edition of TeamViewer, a program that is used to perform remote administration, onto affected computers, and makes changes to the application with the help of Dynamic Link Library (DLL) compromising, so the targeted PC can be controlled remotely. TeamSpy may also exploit TeamViewer to install more software to gain personal information, data or files from infected PCs. Since TeamViewer is used in the malware attack, the malicious combo kit can be called TeamSpy. TeamSpy targets PDF files such as .pdf, .vmdk or .tc (disk images); office documents and files such as .doc, .mdb, .rtf or .xls; together with files having personal information such as passwords ('secret', 'saidumlo', 'napor', 'pass' or 'cekper') and encryption keys like .p12 or .pgp.

Loading...