Zeus Trojan

Banking trojan that industrialized credential theft, then leaked its source and spawned a dynasty.

Core Principles & Analysis

• Zeus grabbed banking logins by injecting itself into browsers — man-in-the-browser attacks.
• Its 2011 source-code leak seeded successors, most notoriously Gameover ZeuS.
• The 2014 Operation Tovar takedown of Gameover ZeuS also disrupted CryptoLocker.