Security researchers have analyzed a new version of the notorious ZeuS banking Trojan. The new variant, ZeusVM, is designed to retrieve its configuration file from an image.
Experts from Malwarebytes and French security researcher Xylitol have noticed that alongside other components, the malware is retrieving a JPG image from a server.
A closer analysis of the file revealed that it was an image copied from the web, but with some additional code appended to it. By usin…