The package apparently also contains the Carberp bootkit, the Stone bootkit, Citadel, Ursnif and more – including “text files containing apparently private chats and various usernames and passwords for several FTP servers.”
Full story - http://www.infosecurity-magazine.com/vi ... -expected/