Gozi Variant RM3 - Curiosities of the wildest banking malware
released on 2021-05-05 @ 09:08:25 PM
The Fox-IT/NCC Group Research and Intelligence Fusion Team has been tracking the Gozi variant RM3 for close to 30 months. In this post FOX-IT provides some history, analysis, and observations on this most pernicious family of banking malware targeting Oceania, the UK, Germany, and Italy.
We’ll start with an overview of its origins and current operations before providing a deep dive technical analysis of the RM3 variant.