Encrypted | DataProtectionCenter.com

Galaxies Collide

21

Oct

2011

Duqu contains a backdoor that steals information. Infostealers need to send the stolen info back somehow. Careful infostealers try to make the transfer look innocent in case somebody is watching network traffic. Duqu hides it’s traffic by making it look like normal web traffic. Duqu connects to a server (206.183.111.97 aka canoyragomez.rapidns.com, which used to […]

Category General Written by F-Secure Antivirus Research Weblog 0 Comments

Stuxnet v2 or TR/Duqu

21

Oct

2011

The Stuxnet virus has gone to the next generation: “TR/Duqu”. Avira already detects the new malware since VDF 7.11.16.63, which was released on 2011-10-19. The new variant of Stuxnet consists of 3 main files: a driver file (at this time we can discern between 4 slightly different versions) an encrypted DLL an encrypted configuration file […]

Category General Written by Avira - TechBlog 0 Comments

An analysis of the ACH spam campaign

08

Sep

2011

Recently, we have seen a resurgence of malicious spam campaigns using an “ACH” theme. The Automated Clearing House (ACH) is an an electronic network for financial transactions in the United States overseen by NACHA. Last week, we came across a suspicious looking spam campaign with the unusual subject line “UAE Central Bank Warning: Email scam […]

Category Security Written by M86 Security Labs Blog 0 Comments

The Latest in IT Security

Posts Tagged ‘Encrypted’

Galaxies Collide

Stuxnet v2 or TR/Duqu

An analysis of the ACH spam campaign

Categories

Featured

Archives

Latest Comments

About Us

Contact Us