Tricks and COMfoolery: How Ursnif (Gozi) Evades Detection

In February we saw a resurgence of Ursnif (also known as Gozi), a credential-stealing Trojan. Learn how Ursnif bypasses an attack surface reduction rule.

Ursnif/Gozi Malware Analysis, Overview by

Ursnif Trojan - Malware removal instructions (updated)

Ursnif aka Gozi Malware analysis with ANY.RUN malware sandbox

Unwrapping Ursnifs Gifts - The DFIR Report

Ursnif Trojan - Malware removal instructions (updated)

Ursnif Malware Banks on News Events for Phishing Attacks

Ursnif Trojan - Malware removal instructions (updated)

Wireshark Tutorial: Examining Ursnif Infections

Ursnif Trojan - Malware removal instructions (updated)

Ursnif malware switches from bank account theft to initial access

Wireshark Tutorial: Examining Ursnif Infections

URSNIF malware still making new waves

Investigation of Urlsnif Malware Network Traffic - Security Investigation