Posts Tagged ‘dll module’

Never Ending 0day Story

Sep

2012

Yesterday, it’s reported that there is an IE 0day actively exploited in the wild. We did a quick analysis and have some interesting findings.The exploit contains 4 parts: exploit.html – first stage exploiting web page (initialize variables and load the .SWF file). Moh2010.swf – encrypted SWF using DoSWF, it contains shellcode and heap spray code. […]

Category General Written by Blog Central > McAfee Labs 0 Comments

Rovnix bootkit framework updated

Jul

2012

We have been tracking the activity of the Rovnix bootkit family since April 2011. Rovnix was the first bookit family to use VBR (Volume Boot Record) infection (NTFS bootstrap code) for loading unsigned kernel-mode drivers on x64 (64 bit) platforms. The reason for exploring further is the desire of the Rovnix developers to bypass antivirus […]

Category General Written by ESET ThreatBlog 0 Comments

ZeroAccess Rootkit Launched by Signed Installers

Nov

2011

Digital certificates and certificate authorities have been much in the news recently. Attacks–such as those used by Stuxnet, Duqu, and other malware–involving stolen certificates show an increasingly worrisome new security trend. Certificate authorities have been targeted several times in the recent past with some success. There is a large chunk of known malware signed by […]

Category General Written by admin 0 Comments

The Latest in IT Security

Posts Tagged ‘dll module’

Never Ending 0day Story

Rovnix bootkit framework updated

ZeroAccess Rootkit Launched by Signed Installers

Categories

Featured

Archives

Latest Comments

About Us

Contact Us