configuration block | DataProtectionCenter.com

Rovnix.D: the code injection story

27

Jul

2012

ESET – In the one of my previous blog posts I described the bootkit functionality included in modifications found in new Rovnix.D samples (Rovnix bootkit framework updated), but further detailed analysis uncovered some interesting updates to the code injection technique employed. During the Rovnix.D code analysis process we found algorithms for multiple code injections with […]

Category General Written by ESET ThreatBlog 0 Comments

New MacOS X backdoor variant used in APT attacks

29

Jun

2012

Two days ago we intercepted a new APT campaign using a new MacOS X backdoor variant targeted at Uyghur activists. But before we go into details, let’s start with a quiz: – The Dalai Lama walks into an Apple Store. Why? A possible answer is, “to buy one of the new MacBook Pro’s with the […]

Category General Written by Securelist / Blog 0 Comments

The Day The Stuxnet Died

25

Jun

2012

Deep inside one of Stuxnet’s configuration blocks, a certain 8 bytes variable holds a number which, if read as a date, points to June 24th, 2012. This is actually the date when Stuxnet’s LNK replication sub-routines stop working and the worm stops infecting USB memory sticks. The specific variable which keeps the “time of death” […]

Category General Written by Securelist / Blog 0 Comments

The Latest in IT Security

Posts Tagged ‘configuration block’

Rovnix.D: the code injection story

New MacOS X backdoor variant used in APT attacks

The Day The Stuxnet Died

Categories

Featured

Archives

Latest Comments

About Us

Contact Us