Threat Database Trojans Trojan.Ferret


By LoneStar in Trojans

Threat Scorecard

Ranking: 4,876
Threat Level: 90 % (High)
Infected Computers: 1,465
First Seen: January 8, 2014
Last Seen: September 12, 2023
OS(es) Affected: Windows

Security researchers have received reports of widespread DDoS attacks that seem to be associated with a new threat capable of launching devastating DDoS attacks on specific targets. PC security analysts have named this threat Trojan.Ferret and have noted that Trojan.Ferret has several features that make Trojan.Ferret particularly destructive. Trojan.Ferret is a severe threat infection that poses a serious threat both to websites affected by the DDoS attack and to businesses and people that rely on the stability of these websites.

Unraveling Trojan.Ferret

Trojan.Ferret was first detected and identified by malware researchers in Russia. Trojan.Ferret is a DDoS bot used to overload specific servers with requests using advanced techniques that are designed to prevent the targets from defending themselves. Trojan.Ferret is developed in Delphi and was probably written by criminals located in the Russian federation. Trojan.Ferret has anti-debugging features that may prevent researchers from launching Trojan.Ferret in a virtual machine, may modify its own code and uses UPX packing and process hollowing to make itself more difficult to detect, study and remove. Trojan.Ferret also uses advanced obfuscation techniques to disguise its strings and code from individuals attempting to conduct a study of Trojan.Ferret's features and structure. Trojan.Ferret may be used to launch DDoS attacks using several protocols, including HTTP, TCP and UDP floods. At the present, malware researchers are currently studying Trojan.Ferret and have only identified a handful of its command and control servers.

Protecting Yourself and Your Website from Trojan.Ferret Attacks

If you administrate a Web page, then DDoS bots like Trojan.Ferret present a significant threat to your bottom line. There are several ways in which you can protect your website from threat attacks involving Trojan.Ferret, that usually involve expanding your resources to make it too expensive, or time consuming to continue a prolonged attack and tracing the source of attacks in order to fight back. There are numerous services that offer protection from DDoS attacks. In fact, Google offers Web masters a free service known as Google Shield, which leverages Google's enormous resources to help website administrators that have to deal with attacks like those carried out by Trojan.Ferret.


Most Viewed