Eset | DataProtectionCenter.com

Nymaim – obfuscation chronicles

26

Aug

2013

Nymaim – Obfuscation Chronicles Introduction Last month, my colleague Sebastien Duquette detailed the home campaign, a long-lasting operation consisting of compromised web servers running a malicious Apache module named Darkleech (detected by ESET as Linux/Chapro) that redirects visitors to a Blackhole exploit kit. Sebastien stated that one of the final payloads dropped by this operation […]

Category General Written by We Live Security 0 Comments

Mysterious Avatar rootkit with API, SDK, and Yahoo Groups for C&C communication

01

May

2013

The story of the mysterious malware detected by ESET as Win32/Rootkit.Avatar began in February 2013 when some adverts for this rootkit leaked from Russian cybercrime forums (http://pastebin.com/maPY7SS8). This information produced some heated discussions in the malware research community, however a sample of the Avatar rootkit was not found and published, until now. In this blog […]

Category General Written by We Live Security 0 Comments

Win32/Cridex: Java pushes Cyprus into a Blackhole

20

Mar

2013

Sadly, Cyprus has been the source of bad news lately. Even sadder, nothing travels faster than bad news, and bad people are all too ready to use bad news to trick their victims into opening bad files. My colleague Aleksandr Matrosov has alerted us to a spammed out message crammed with malicious links. Here’s a […]

Category General Written by We Live Security 0 Comments

The Latest in IT Security

Posts Tagged ‘Eset’

Nymaim – obfuscation chronicles

Mysterious Avatar rootkit with API, SDK, and Yahoo Groups for C&C communication

Win32/Cridex: Java pushes Cyprus into a Blackhole

Categories

Featured

Archives

Latest Comments

About Us

Contact Us