image file | DataProtectionCenter.com

Galaxies Collide

21

Oct

2011

Duqu contains a backdoor that steals information. Infostealers need to send the stolen info back somehow. Careful infostealers try to make the transfer look innocent in case somebody is watching network traffic. Duqu hides it’s traffic by making it look like normal web traffic. Duqu connects to a server (206.183.111.97 aka canoyragomez.rapidns.com, which used to […]

Category General Written by F-Secure Antivirus Research Weblog 0 Comments

Online game trading – sometimes more than you bargained for

10

Oct

2011

Some online games offer features for the game players to sell their game items online. In such situations, it is highly likely some sellers may send the potential buyers a screenshot of their items for sale, for example, via Instant Messaging programs. Recently, malware distributors have started taking advantage of this. They pretend to be […]

Category General Written by Microsoft Malware Protection Center 0 Comments

Puppet process

24

Sep

2011

Injecting code to system process is common way malware use to avoid being detected by antivirus engine, but now we found a brand new way of such injection. According to the samples we received, they are based on command lines, so we guess this way still remain in demo stage, but we think it may […]

Category General Written by AVG Blogs 0 Comments

The Latest in IT Security

Posts Tagged ‘image file’

Galaxies Collide

Online game trading – sometimes more than you bargained for

Puppet process

Categories

Featured

Archives

Latest Comments

About Us

Contact Us