Alpha Testing the AlphaLeon HTTP Bot

ASERT was initially alerted about an emerging threat called AlphaLeon by Deep & Dark Web intelligence provider Flashpoint in August 2015. It caught and kept our interest because it sounded like it could be a new “banker” malware family. While it took some time to find samples of the malware in the wild, this post goes through the details of what we found. It is a malware analyst’s “alpha test” of the AlphaLeon HTTP Bot.



Alpha Testing the AlphaLeon HTTP Bot