Clampi

Clampi is a Trojan horse that is able to connect to different remote servers to download updates or instructions to carry out on the compromised system. Clampi acts as a botnet and can spread through network shares or compromised websites that have malicious code installed. Clampi populates the infected system with multiple malicious executable files. When executed, Clampi is able to query the locale of the compromised computer. Detection of Clampi is very difficult because it uses encryption to stay hidden from various security applications.