DreamBot (Malware Family)
By Fraunhofer FKIE
Archived: 2026-04-05 20:42:45 UTC
In 2014, a variant of Gozi ISFB was developed. Mainly, the dropper performs additional anti-vm checks (vmware,
vbox, qemu), while the actual bot-dll remains unchanged in most parts. New functionality, such as TOR support,
was added though and often, the Fluxxy fast-flux network is used.
See win.gozi for additional historical information.
[TLP:WHITE] win_dreambot_auto (20251219 | Detects win.dreambot.)
Source: https://malpedia.caad.fkie.fraunhofer.de/details/win.dreambot
https://malpedia.caad.fkie.fraunhofer.de/details/win.dreambot
Page 1 of 1