▁RC 5 ▁ci pher . ▁Regin ▁communic ates ▁over ▁the ▁Internet ▁using ▁IC MP / ping , ▁commands ▁embedded ▁in ▁HTTP ▁cookies ▁and ▁custom ▁TCP ▁and ▁U DP ▁protocol s ▁with ▁a ▁command ▁and ▁control ▁server ▁which ▁can ▁control ▁operations , ▁upload ▁additional ▁pay loads , ▁etc . ▁ ▁Ident ification ▁and ▁naming ▁Sym ante c ▁says ▁that ▁both ▁it ▁and ▁K asp ers ky ▁identified ▁the ▁mal ware ▁as ▁Back door . R egin . ▁Most ▁ant iv irus ▁programs , ▁including ▁K asp ers ky , ▁( as ▁of ▁October ▁ 2 0 1 5 ) ▁do ▁NOT ▁identify ▁the ▁sample ▁of ▁Regin ▁released ▁by ▁The ▁Inter cept ▁as ▁mal ware . ▁ ▁On ▁ 9 ▁March ▁ 2 0 1 1 ▁Microsoft ▁added ▁related ▁entries ▁to ▁its ▁Mal ware ▁Encyclopedia ; ▁later ▁two ▁more ▁variants , ▁Regin . B ▁and ▁Regin . C ▁were ▁added . ▁Microsoft ▁appears ▁to ▁call ▁the ▁ 6 4 - bit ▁variants ▁of ▁Regin ▁Pra x . A ▁and ▁Pra x . B . ▁The ▁Microsoft ▁entries ▁do ▁not ▁have ▁any ▁technical ▁information . ▁Both ▁K asp ers ky ▁and ▁Sym ante c ▁have ▁published ▁white ▁papers ▁with ▁information ▁they ▁learned ▁about ▁the ▁mal ware . ▁ ▁Kn own ▁attacks ▁and ▁origin ator ▁of ▁mal ware ▁German ▁news ▁magazine ▁Der ▁Sp iegel ▁reported ▁in ▁June ▁ 2 0 1 3 ▁that ▁the ▁US ▁intelligence ▁National ▁Security ▁Agency ▁( NS A ) ▁had ▁conducted ▁online ▁surve ill ance ▁on ▁both ▁European ▁Union ▁( E U )