Obfuscation | DataProtectionCenter.com

Red October Botnet Hides Calls to Control Server

03

Mar

2013

While working on the release of the latest version of the McAfee Network Security Platform, which offers advanced malware and botnet protection, we tested a sample of the malware Red October. With the help of our in-house advanced botnet analysis framework, we analyzed the network traffic generated by this sample and tracked its communications with the […]

Category General Written by Blog Central > McAfee Labs 0 Comments

Polymorphic AutoRun Worm Evolves and Obfuscates

16

Feb

2013

Recently we have seen a spike in a Visual Basic 6-compiled AutoRun worm family. The family is both client- and server-side polymorphic. (For more on this family, refer to our VIL and Advisory entries.)The W32/Autorun.worm.aaeh family usually gets on a victim’s machine through email spam, Blacole drive-by downloads, or downloads by BackDoor-FJW. From a behavioral perspective, […]

Category General Written by Blog Central > McAfee Labs 0 Comments

Cross-Platform Frutas RAT Builder and Back Door

12

Feb

2013

We recently came across a sample of a back door remote access tool (RAT) written entirely in Java. The RAT is freely distributed on underground forums, free for any registered forum user to download. It is named Frutas, which means “fruit” in Spanish. Figure 1. Frutas logo The Frutas RAT allows attackers to create a connect-back client […]

Category General Written by Symantec Security Response Blog 0 Comments

The Latest in IT Security

Posts Tagged ‘Obfuscation’

Red October Botnet Hides Calls to Control Server

Polymorphic AutoRun Worm Evolves and Obfuscates

Cross-Platform Frutas RAT Builder and Back Door

Categories

Featured

Archives

Latest Comments

About Us

Contact Us