Posts Tagged ‘master boot record’

How Deep Discovery Protected Against The Korean MBR Wiper

Mar

2013

We have continued to look into the MBR-wiping attacks that hit Korea earlier. We believe we now have a good picture of how the attack was conducted, why it caused so much damage, and how we were able to protect users using the threat detection capabilities found in Deep Discovery.On March 19, we saw the […]

Category General Written by Security Intelligence 0 Comments

Win32/Gapz: New Bootkit Technique

Dec

2012

In the last couple of years a number of new bootkits have appeared in the wild targeting the Microsoft Windows platform. Among the most prominent examples are TDL4, Olmasco and Rovnix. These each employ different ways of infecting the system by means of modifying either the MBR (Master Boot Record) or the VBR/IPL (Volume Boot […]

Category General Written by ESET ThreatBlog 0 Comments

Win32/Gapz: steps of evolution

Dec

2012

The Win32/Gapz malware family was mentioned publicly for the first time in the middle of November 2012, by the Russian antivirus company Doctor Web (Trojan.Gapz.1 infecting Windows in a new manner). But I didn’t find the technical details about this threat in that report and so prepared a deeper analysis. Win32/Gapz uses many exploitation techniques […]

Category General Written by ESET ThreatBlog 0 Comments

The Latest in IT Security

Posts Tagged ‘master boot record’

Win32/Gapz: New Bootkit Technique

Win32/Gapz: steps of evolution

Categories

Featured

Archives

Latest Comments

About Us

Contact Us