Cybersecurity report

# ‘Citadel’ trojan attacking password managers

WeLiveSecurity (ESET), November 24, 2014. Citadel continuity: IBM Trusteer's finding, seventeen months after the June 2013 Microsoft/FBI action, of Citadel configurations in the wild targeting password managers and authentication software.

**Source type:** Cybersecurity report

**Published:** November 24, 2014

**Research grade:** T2

**Used in entries:** 1

## Bibliographic record

**Publisher:** WeLiveSecurity (ESET)

**Published:** November 24, 2014

**Source type:** Cybersecurity report

**Research grade:** Source grade T2

**Language:** English

**Official record:** Not an official publication

**Address:** [https://www.welivesecurity.com/2014/11/24/citadel-trojan-attacking-password-managers/](https://www.welivesecurity.com/2014/11/24/citadel-trojan-attacking-password-managers/)

**What it supports:** Citadel continuity: IBM Trusteer's finding, seventeen months after the June 2013 Microsoft/FBI action, of Citadel configurations in the wild targeting password managers and authentication software

**Dataset id:** src\_welivesecurity\_citadel\_password\_managers\_2014

## Research notes

- By Alan Martin.
- published\_on matches the date in the article's own URL path (2014/11/24); the rendered page carries the same date.

How this source is used

Cited 1 time across 1 record type.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Later activity

1 citation

Cited for activity recorded after the takedown.

-
[Continued Citadel operation after the 2013 disruption](https://takedownindex.org/takedowns/citadel-botnet-disruption)

Same service on replacement infrastructure, Citadel botnet disruption

Later outcome

[All sources](https://takedownindex.org/sources)