[195011] in North American Network Operators' Group
RE: GozNym - Gozi ISFB - Nymaim
daemon@ATHENA.MIT.EDU (Aaron Gould)
Mon Jun 19 11:56:50 2017
X-Original-To: nanog@nanog.org
From: "Aaron Gould" <aaron1@gvtc.com>
To: "'anthony kasza'" <anthony.kasza@gmail.com>
In-Reply-To: <CAEZw2byftEyYizt5NKPb13z+ugiM1H1rkyViopseT6jBmBLCpw@mail.gmail.com>
Date: Mon, 19 Jun 2017 10:54:57 -0500
Cc: 'North American Network Operators Group' <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
I was already reading that=E2=80=A6 haven=E2=80=99t finished=E2=80=A6 is =
there a section in there about cleaning/blocking it ?
=20
-Aaron Gould
=20
From: anthony kasza [mailto:anthony.kasza@gmail.com]=20
Sent: Monday, June 19, 2017 10:53 AM
To: Aaron Gould <aaron1@gvtc.com>
Cc: North American Network Operators Group <nanog@nanog.org>
Subject: Re: GozNym - Gozi ISFB - Nymaim
=20
Have you had a chance to read this blog?=20
=20
https://securityintelligence.com/meet-goznym-the-banking-malware-offsprin=
g-of-gozi-isfb-and-nymaim/
=20
-AK
=20
On Jun 19, 2017 8:54 AM, "Aaron Gould" <aaron1@gvtc.com =
<mailto:aaron1@gvtc.com> > wrote:
Anyone experienced in stopping/blocking/cleaning GozNym - Gozi ISFB - =
Nymaim
?
- Aaron Gould