hook | DataProtectionCenter.com

Mayachok Hooks INT8 to Dodge Emulators

06

Feb

2013

Many new variants of the same bootkits are created simply to avoid detection. Bitdefender anti-malware researchers Cristian Istrate and Marius Tivadar have created a small write-up on the evolution and current status of the Mayachok bootkit: The first version started with its malicious code placed directly in the 15 sectors following the Boot Sector (variant […]

Category General Written by Bitdefender Labs 0 Comments

Backdoor.Proxybox: Kernel File System Hooking

14

Aug

2012

A low level file system driver was bundled with the latest version of Backdoor.Proxybox named “rxsupply”. The malicious driver was designed to deny access to the files used by the malware in order to improve persistence on compromised computers. The driver functionality and methods used for hooking kernel file system access are described below. Figure 1. […]

Category General Written by Symantec Security Response Blog 0 Comments

An Int 13 trick from the new Wapomi sample

09

Aug

2012

It’s quite common for bootkit malware to modify the Master Boot Record (MBR), Volume Boot Record (VBR) and even BIOS but we were unaware of anything more innovative.Last week however, we found a new bootkit sample in China, which appeared to be a bit different from other bootkits. It behaved abnormally in its MBR’s 512 […]

Category General Written by AVG Blogs 0 Comments

The Latest in IT Security

Posts Tagged ‘hook’

Mayachok Hooks INT8 to Dodge Emulators

Backdoor.Proxybox: Kernel File System Hooking

An Int 13 trick from the new Wapomi sample

Categories

Featured

Archives

Latest Comments

About Us

Contact Us