[More research from our colleagues in Russia] In the beginning of February we found a new modification of our “old friend” Win32/Rovnix (the dropper detected as Win32/Rovnix.B trojan), which is the first bootkit using VBR (Volume Boot Record) infection. An interesting fact is that Rovnix bootkit components were used in Win32/Carberp, the most widely spread […]
How exactly does a young mum, aged 23, end up as a getaway driver in an armed robbery instead of going on a hot date with an old friend she reconnected with on Facebook? In the teeny tiny town of Ferndale, about 20 miles north of Cardiff in Wales, Leah Gibbs was exchanging flirty messages […]
My colleague Aleks Matrosov has come across an interesting if uncomfortable post on a Russian language forum, advertising a "Boot loader for drivers" currently under test that doesn't require a Digital Signature driver, which sounds very much like our old friend TDL4. This metamorphic malware (each build generates a fresh binary) loads before the start of PatchGuard. It's […]
Latest Comments