payload | DataProtectionCenter.com

Sneaky vBulletin Script Injections

20

Jul

2012

In the past few days/weeks we have been seeing some nasty vBulletin infections that are proving difficult to find. In this post we’ll describe it and what we have done to remove it. We recently wrote about Conditional Malware, this is but another instance of that. In this instance, the conditions are set around specific […]

Category Security Written by Sucuri 0 Comments

More 64-bit obfuscator madness

20

Jul

2012

Just after we published a blog about a 64-bit obfuscator, we very quickly discovered another malware family following the same trend. Claretore is also using two-layer 64-bit obfuscation, although it does it a little differently to Ursnif. The first layer simply decrypts the code of the second layer and passes it control. There’s even a 64-bit […]

Category General Written by Microsoft Malware Protection Center 0 Comments

Multi-platform Backdoor with Intel OS X Binary

14

Jul

2012

Karmina wrote about a malware targeting multiple operating systems on Monday. The Mac OS X sample that time was a PowerPC binary. Yesterday, we received an Intel x86 version in our backend systems which appears to have been used in a similar type of attack. Nothing fancy. This time the sample uses the server 199.180.197.59, […]

Category General Written by F-Secure Antivirus Research Weblog 0 Comments

The Latest in IT Security

Posts Tagged ‘payload’

Sneaky vBulletin Script Injections

More 64-bit obfuscator madness

Multi-platform Backdoor with Intel OS X Binary

Categories

Featured

Archives

Latest Comments

About Us

Contact Us