Trojan

Ramnit

First seen: 2010-01 • Status: active

Currently Active Threat

Ramnit is an old banking virus that refuses to die. It has been around since 2010 and keeps coming back.

Overview

Ramnit started as a worm and evolved into a banking trojan. It has survived multiple takedown attempts.

Also Known As

Ramnit Banking Trojan

How It Spreads

  • Exploit kits
  • Malspam

What It Does

  • Banking credential theft
  • Web injection

Is your business exposed?

Target Platforms

Windows

Detection Tips

  • Monitor for web injection

MITRE ATT&CK Techniques

T1185, T1055

If You're Infected

  1. 1.

    Contact bank immediately

Related Malware

Zeus, Dridex

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required