WITCHCOVEN
Description
(FireEye) The perpetrators alter specific websites to redirect visitors to a profiling script we call WITCHCOVEN. This script collects detailed information about the user’s computer and installs a persistent tracking tool, called a “supercookie,” which becomes part of a unique ‘browser fingerprint’ that can identify the user’s computer moving forward.
Names
| Name |
|---|
| WITCHCOVEN |
Category
Malware
Type
- Reconnaissance
- Dropper
Information
Malpedia
Other Information
Uuid
f3c64193-9cb2-4ae3-b1b9-fa66980371df
Last Card Change
2020-04-23