ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Signatures For Dark Tequila Mexican Malware
GuitarBob


Joined: 09 Jul 2006
Posts: 4390
Location: USA
Reply with quote
There was a malware campaign in Mexico that developed in late August 2018 featuring a financial information stealing trojan that also collects web page sign on information. Clam AV does not detect this, so I am releasing an MDB signature below for the two variants for ClamWin users there. Copy the 2 signatures in the ClamWin DB folder into a Notepad file named Sigfile.mdb or add it to an existing mdb file there. Do not save the file as a text file--save it as "All Files" using the Windows Explorer right click menu. You can keep the signature for 2-3 weeks because it will probably be outdated by new variants by then.

874496:22f2f6fb1608796f0ad3cc8d205e670e:Win.Trojan.Crypt-090518.0923
874496:f964d27a86dd0f8e06b2e88c9d35d803:Win.Trojan.Crypt-090518.0921

Regards,
View user's profileSend private message
Signatures For Dark Tequila Mexican Malware
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic