Skip to content
MalwareWiki

Botnet

Pkybot

aka Pykbot · TBag · Bublik

Pkybot is a trojan, which has its roots as a downloader dubbed Bublik in 2013 and was seen distributing GameoverZeus in 2014 (ref: fortinet).

Pkybot, also known as Pykbot, TBag, Bublik, is a Windows botnet.

Background

Pkybot is a trojan whose origins trace back to a 2013 downloader called Bublik, which Fortinet observed delivering GameoverZeus during 2014. According to Kleissner, Kafeine, and iSight, webinject support relying on the notorious ATS was introduced early in 2015.

Source: Malpedia (Fraunhofer FKIE).