value:  Ursnif has hooked APIs to perform a wide variety of information theft such as monitoring traffic from browsers. ;; Zebrocy installs an application-defined Windows hook to get notified when a network drive has been attached so it can then use the hook to call its RecordToFile file stealing method. ;; Zeus Panda hooks processes by leveraging its own IAT hooked functions. ;; ZxShell hooks several API functions to spawn system threads.
name: Input Capture: Credential Api Hooking