Overview[]
Citadel is a Zeus variant that first appeared in 2012. The sale and use of Citadel is limited to select groups of cybercriminals and run as-a-service. . . . In April 2016, a new variant of Citadel, dubbed Atmos, began targeting financial institutions in France. The Trojan is noted as having C&C servers based in Vietnam, Canada, Ukraine, Russia, the US and Turkey.[1]