Brambul is an
SMB protocol
Server Message Block (SMB) is a communication protocol originally developed in 1983 by Barry A. Feigenbaum at IBM and intended to provide shared access to files and printers across nodes on a network of systems running IBM's OS/2. It also provid ...
computer worm that
decrypts and automatically moves from one computer to its second computer.
It is responsible for the
dropping of the
Joanap botnet.
History
Brambul was first discovered in 2009 and has not had a disclosure prior to its notoriety. It was observed by cybersecurity firms and was not extensive subject.
Sony hack (Late 2014)
Brambul was among the malware to be identified during the
Sony Pictures hack.
Investigation (Early 2019)
Brambul as well as
Joanap botnet have both been shut down via a court order.
Cycle
The computer worm has the ability to automatically scan IP addresses and decrypt passwords including, but not limited to the following.
System drive share
Brambul will share information of the system to the cyberattacker. Information shared includes the
IP address
An Internet Protocol address (IP address) is a numerical label such as that is connected to a computer network that uses the Internet Protocol for communication.. Updated by . An IP address serves two main functions: network interface ident ...
, hostname and the username and password.
References
External links
HIDDEN COBRA – Joanap Backdoor Trojan and Brambul Server Message Block Worm , CISA
{{Hacking in the 2010s
Computer worms
2014 in computing