Furthermore, the Trojan can take capture the contents of users’ screens, download updates and communicate with a remote website.
Which website does the Trojan communicate with?
The Trojan appears to connect to an IP address, 126.96.36.199, which appears to be based in Düsseldorf or Neuss.
Where is the LKA Nordrhein-Westfalen based?
Ich frage mich wieso das LKA NRW so lange brauchte den Trojanereinsatz zuzgeben.