memory | DataProtectionCenter.com

Major shift in strategy for ZeroAccess rootkit malware, as it shifts to user-mode

06

Jun

2012

SophosLabs has been monitoring a new strain of the infamous ZeroAccess rootkit that has been hitting the internet over the last few weeks.ZeroAccess is a sophisticated kernel-mode rootkit that enslaves victim PCs, adding them to a peer-to-peer botnet from which they receive commands to download other malware. The rootkit has undergone several revisions since its […]

Category General Written by Naked Security - Sophos 0 Comments

Update: TaskManager.xls V0.1.3 Killer Shellcode

01

May

2012

didierstevens.com – My TaskManager spreadsheet provides you with a couple of commands to terminate (malicious) programs. But sometimes these commands can’t terminate a process (for various reasons).Today I’m adding a new command to our toolkit: injecting and executing shellcode in the target process. I’m providing 32-bit and 64-bit shellcode that calls ExitProcess. When this shellcode […]

Category Security Written by Didier Stevens 0 Comments

Technical paper: The ZeroAccess rootkit under the microscope

11

Apr

2012

ZeroAccess is a sophisticated kernel-mode rootkit that is quickly becoming one of the most widespread malware threats.In a new technical paper from SophosLabs, malware researcher James Wyke explores the ZeroAccess threat, examines how it works and looks at what the malware’s ultimate goal is.ZeroAccess has a resilient peer-to-peer command and control infrastructure, runs on both […]

Category General Written by Naked Security - Sophos 0 Comments

The Latest in IT Security

Posts Tagged ‘memory’

Major shift in strategy for ZeroAccess rootkit malware, as it shifts to user-mode

Update: TaskManager.xls V0.1.3 Killer Shellcode

Technical paper: The ZeroAccess rootkit under the microscope

Categories

Featured

Archives

Latest Comments

About Us

Contact Us