x86 | DataProtectionCenter.com – Tech and Security

Lockscreen Win32:Lyposit displayed as a fake MacOs app

21

May

2013

When the mastermind hackers of the notorious Carberp Banking Trojan were arrested, we thought the story had ended. But a sample that we received on May 7th, a month after the arrests, looked very suspicious. It connected to a well known URL pattern and it really was the Carberp Trojan. Moreover, the domain it connected […]

Category General Written by Avast! blog 0 Comments

Shamoon the Wiper in details

22

Aug

2012

We continue to analyse the Shamoon malware. This blog contains information about the internals of the malicious samples involved in this campaign. Samples nesting The main executable (dropper) includes 3 resources, each maintains a ciphered program. The cipher is pretty simple ? xor by dword. This was mentioned in our first blog-post. Resource PKCS12:112 maintains […]

Category General Written by Securelist / Blog 0 Comments

TDSS and hacking the hackers

07

Jun

2011

If you've been following the research we've been publishing (spearheaded by my Russian colleagues Aleksandr Matrosov and Eugene Rodionov) you'll be aware that the TDL rootkit family doesn’t make use of OS’s own file system. Instead, it implements its own hidden storage for the payload, configuration files and so on. The hidden storage is located at the end […]

Category General Written by ESET ThreatBlog 0 Comments

The Latest in IT Security

Posts Tagged ‘x86’

Lockscreen Win32:Lyposit displayed as a fake MacOs app

Shamoon the Wiper in details

TDSS and hacking the hackers

Categories

Featured

Archives

Latest Comments

About Us

Contact Us