GameOver ZeuS (GOZ), also known as peer-to-peer (P2P) ZeuS, ZeuS3, and GoZeus, is a Trojan horse developed by Russian cybercriminal Evgeniy Bogachev. Created in 2011 as a successor to Jabber Zeus, another project of Bogachev's, the malware is notorious for its usage in bank fraud resulting in damages of approximately $100 million and being the main vehicle through which the CryptoLocker ransomware attack was conducted, resulting in millions of dollars of losses. At the peak of its activity in 2012 and 2013, between 500,000 and 1 million computers were infected with GameOver ZeuS.
The original GameOver ZeuS was propagated through spam emails containing links to websites that would download the malware onto the victim's computer. The infected computer was then integrated into a botnet, considered to be one of the most sophisticated and secure botnets in the world at the time. The GOZ botnet was particularly notable for its decentralized, peer-to-peer infrastructure, which combined with other security measures such as rootkits made shutting down the botnet extremely difficult. The botnet's activities were additionally directed by an organized crime group headed by Bogachev and referring to itself as the "business club", which was primarily based in Russia and Eastern Europe. The syndicate further complicated attempts to combat it by law enforcement and security researchers using a large money laundering network and DDoS attacks, used as both retaliation and as a form of distraction during thefts.
In 2014, the original GameOver ZeuS botnet was shut down by a collaboration between several countries' law enforcement and private cybersecurity firms, named Operation Tovar. Bogachev was indicted shortly after and a reward of $3 million was issued for information leading to his arrest, at the time the highest reward for a cybercriminal in history. Less than two months after Operation Tovar was executed, a new strain of GameOver ZeuS was discovered. Named "newGOZ", it lacked peer-to-peer capabilities but otherwise shared ninety percent of its codebase with the original GOZ. The involvement of the original GameOver ZeuS administrators in newGOZ's activity since its creation is disputed.
GameOverZeuS (GOZ), also known as peer-to-peer (P2P) ZeuS, ZeuS3, and GoZeus, is a Trojan horse developed by Russian cybercriminal Evgeniy Bogachev....
out by law enforcement agencies from multiple countries against the GameoverZeuS botnet, which was believed by the investigators to have been used in...
or bank wire transfer, or purchase bitcoin. Alureon Botnet Conficker GameoverZeuS Regin (malware) Technical support scam Timeline of computer viruses...
networks across the country, the multi-nation effort that disrupted the "GameoverZeuS" Botnet and "CryptoLocker" Ransomware scheme that was connected to the...
Command and control (malware) GameoverZeuS Operation Tovar Timeline of computer viruses and worms Tiny Banker Trojan Torpig Zeus (malware) Zombie (computer...
control (malware) GameoverZeuS, the successor to ZeuS Operation Tovar Timeline of computer viruses and worms Tiny Banker Trojan Torpig Zeus (malware) Zombie...
second main iteration of the Zeus malware and racketeering enterprise, succeeding Zeus and preceding GameoverZeus. Jabber Zeus was operational from around...
was isolated by the seizure of the GameoverZeuS botnet as part of Operation Tovar, as officially announced by the U.S. Department of Justice on 2 June...
someone with access to the private key can control the botnet, such as in GameoverZeuS and the ZeroAccess botnet. Newer botnets fully operate over P2P networks...
several copycat ransomware Trojans were also discovered. December: The GameoverZeuS Trojan is discovered. This type of virus steals one's login details...
point occurred in 2015, during the vote of draft United Nations resolution S/2015/562 that called for the creation of an international tribunal to investigate...
(1708–1774), German Rococo artist Harry Goz (1932–2003), American actor GameoverZeuS Gorna Oryahovitsa Airport, serving Veliko Tarnovo, Bulgaria Gozarkhani...
Infrastructure-as-a-Service (IaaS) model, referred in the cybersecurity community as MaaS (Malware-as-a-Service), Cybercrime-as-a-Service (CaaS), or Crimeware. Emotet...
Command and control (malware) GameoverZeuS Operation Tovar Timeline of computer viruses and worms Tiny Banker Trojan Torpig Zeus (malware) Zombie (computer...
Global Information