Citadel’s Man-in-the-Firefox: An Implementation Walk-Through

I did some Citadel work over at https://www.arbornetworks.com/threats/citadel.pdf.

It got a lil' bit of shine:

• http://www.scmagazine.com/bank-on-it-attacks-on-financial-institutions/article/316380/
• http://www.reddit.com/r/Malware/comments/1mkbda/citadels_maninthefirefox_an_implementation/
• http://www.kernelmode.info/forum/viewtopic.php?f=16&t=1465&start=70#p20860