Zeus | Netskope Threat Labs

Description

Zeus (a.k.a. Zbot) is one of the most notorious banking trojans, and it has stolen financial information since 2007 through form grabbing, keylogging, and man in the middle web injects. Its builder and later leaked source code made it the foundation for an entire generation of banking malware and botnets. Although the original operation ended years ago, its techniques and descendants remain central to credential theft campaigns today.

Stats

First seen: February 2022
Last seen: October 2026

Alert name variants

Alert Name	Engine
Binary.Infostealer.Zeus	ATP Sandbox Adv. Heuristics
Binary.Trojan.Zeus	ATP Sandbox Adv. Heuristics
ByteCode-MSIL.Infostealer.Zeus	ATP Sandbox Adv. Heuristics
ByteCode-MSIL.Trojan.Zeus	ATP Sandbox Adv. Heuristics
Document-HTML.Infostealer.Zeus	ATP Sandbox Adv. Heuristics
Document-PDF.Infostealer.Zeus	ATP Sandbox Adv. Heuristics
DOS.Trojan.Zeus	ATP Sandbox Adv. Heuristics
Script-AutoIt.Infostealer.Zeus	ATP Sandbox Adv. Heuristics
Script-BAT.Infostealer.Zeus	ATP Sandbox Adv. Heuristics
Script-JS.Trojan.Zeus	ATP Sandbox Adv. Heuristics
Script-PHP.Trojan.Zeus	ATP Sandbox Adv. Heuristics
Script-WScript.Infostealer.Zeus	ATP Sandbox Adv. Heuristics
Script-WScript.Trojan.Zeus	ATP Sandbox Adv. Heuristics
Script.Infostealer.Zeus	ATP Sandbox Adv. Heuristics
Text.Infostealer.Zeus	ATP Sandbox Adv. Heuristics
Trojan.Spy.Zeus.1.Gen	AV
Trojan.Spy.Zeus.2.Gen	AV
Trojan.Spy.Zeus.C	AV
Win32.Infostealer.Zeus	ATP Sandbox Adv. Heuristics
Win32.Trojan.Zeus	ATP Sandbox Adv. Heuristics
Win64.Infostealer.Zeus	ATP Sandbox Adv. Heuristics
Win64.Trojan.Zeus	ATP Sandbox Adv. Heuristics