Obfuscation | DataProtectionCenter.com

Malicious Apache module used for content injection: Linux/Chapro.A

18

Dec

2012

More than half of all web servers on the Internet use Apache, so when we discovered a malicious Apache module in the wild last month, being used to inject malicious content into web pages displayed by compromised web servers, we were understandably concerned. Our concern deepened when we discovered that this malware was being used […]

Category General Written by ESET ThreatBlog 0 Comments

Javascript Obfuscation in “Canadian Pharmacy” Spam Sites

15

Dec

2012

I’ve been hunting fake “Canadian Pharmacy” sites since last week and managed to find thousands of unique domains associated with this scam. I have some fun points to share as part of my tips in hunting these: Recently, most of fake Canadian Pharmacy sites are using “medic”, “health” and “doctor” keywords in their domain names […]

Category Security Written by Blue Coat 0 Comments

Sharing the Experience of Deobfuscation for a Trojan Sample

14

Dec

2012

Thanks to the ThreatSeeker Network, we have discovered another interesting case of malicious web Trojan and analyzing experience. Let’s share the experience.The first step we should fix the malicious code position, in the red pane of following picture. Then we will do deobfuscating work. From this obfuscation, let me show you some interesting details about […]

Category Security Written by Websense 0 Comments

The Latest in IT Security

Posts Tagged ‘Obfuscation’

Malicious Apache module used for content injection: Linux/Chapro.A

Javascript Obfuscation in “Canadian Pharmacy” Spam Sites

Sharing the Experience of Deobfuscation for a Trojan Sample

Categories

Featured

Archives

Latest Comments

About Us

Contact Us