functionality | DataProtectionCenter.com

The Shamoon Attacks

16

Aug

2012

W32.Disttrack is a new threat that is being used in specific targeted attacks against at least one organization in the energy sector. It is a destructive malware that corrupts files on a compromised computer and overwrites the MBR (Master Boot Record) in an effort to render a computer unusable. W32.Disttrack consists of several components: Dropper-the main […]

Category General Written by Symantec Security Response Blog 0 Comments

Backdoor.Proxybox: Kernel File System Hooking

14

Aug

2012

A low level file system driver was bundled with the latest version of Backdoor.Proxybox named “rxsupply”. The malicious driver was designed to deny access to the files used by the malware in order to improve persistence on compromised computers. The driver functionality and methods used for hooking kernel file system access are described below. Figure 1. […]

Category General Written by Symantec Security Response Blog 0 Comments

Win32/Gataka banking Trojan – Detailed analysis

13

Aug

2012

Win32/Gataka is an information-stealing banking Trojan that can read all of your web traffic and alter the balance displayed on your online banking page to hide fraudulent transfers. It exhibits a modular architecture similar to that of SpyEye, where plugins are required to achieve most of the malware functionality. In our previous blog post, we […]

Category General Written by ESET ThreatBlog 0 Comments

The Latest in IT Security

Posts Tagged ‘functionality’

The Shamoon Attacks

Backdoor.Proxybox: Kernel File System Hooking

Win32/Gataka banking Trojan – Detailed analysis

Categories

Featured

Archives

Latest Comments

About Us

Contact Us