dropper | DataProtectionCenter.com

Backdoor.Hikit: New Advanced Persistent Threat

24

Aug

2012

Thanks to Peter Coogan for his assistance with this research.Earlier this week Mandiant released a blog which talked about a new advanced persistent threat (APT) they found while investigating a potential compromise. Symantec detects the APT in question as Backdoor.Hikit, a Trojan that enables an attacker to gain control of compromised servers from a remote […]

Category General Written by Symantec Security Response Blog 0 Comments

Shamoon the Wiper in details

22

Aug

2012

We continue to analyse the Shamoon malware. This blog contains information about the internals of the malicious samples involved in this campaign. Samples nesting The main executable (dropper) includes 3 resources, each maintains a ciphered program. The cipher is pretty simple ? xor by dword. This was mentioned in our first blog-post. Resource PKCS12:112 maintains […]

Category General Written by Securelist / Blog 0 Comments

The Shamoon Attacks

16

Aug

2012

W32.Disttrack is a new threat that is being used in specific targeted attacks against at least one organization in the energy sector. It is a destructive malware that corrupts files on a compromised computer and overwrites the MBR (Master Boot Record) in an effort to render a computer unusable. W32.Disttrack consists of several components: Dropper-the main […]

Category General Written by Symantec Security Response Blog 0 Comments

The Latest in IT Security

Posts Tagged ‘dropper’

Backdoor.Hikit: New Advanced Persistent Threat

Shamoon the Wiper in details

The Shamoon Attacks

Categories

Featured

Archives

Latest Comments

About Us

Contact Us