Posts Tagged ‘antivirus products’

Phishing Threat Uses UTF-8 BOM in ZIP Signature to Evade Detection

Apr

2013

Last week, we noticed thousands of malware files in the wild that employ a simple phishing attack by modifying the hosts file on Windows systems. What’s interesting, however, is the technique chosen by the malware authors to distribute their payload. The samples in question (Example MD5: 34d9b42bfd64c6f752fe27eef8d80c5f) are packaged in a ZIP file along with […]

Category General Written by Blog Central > McAfee Labs 0 Comments

South Korean Banks, Media Companies Targeted by Destructive Malware

Mar

2013

A massive computer shutdown of two South Korean banks and media companies occurred Wednesday via an Internet malware attack. The malware wiped out the master boot records on the hard drives of the infected computers, overwriting the MBR with either one of these strings: PRINCPES PR!NCPES HASTATI. Figure 1: Snapshot of MBR after infection.The attack […]

Category General Written by Blog Central > McAfee Labs 0 Comments

Trojan.Zeroaccess.C Hidden in NTFS EA

Aug

2012

The latest variant of the Zeroaccess Trojan-Trojan.Zeroaccess.C-makes use of a novel technique to store its malicious content: it exploits a feature provided by the NT File System called Extended Attributes (EA).Even before Zeroaccess.C, malware authors have been looking for new ways to hide their malicious creations by making use of a specialized API provided by […]

Category General Written by Symantec Security Response Blog 0 Comments

The Latest in IT Security

Posts Tagged ‘antivirus products’

Phishing Threat Uses UTF-8 BOM in ZIP Signature to Evade Detection

South Korean Banks, Media Companies Targeted by Destructive Malware

Trojan.Zeroaccess.C Hidden in NTFS EA

Categories

Featured

Archives

Latest Comments

About Us

Contact Us