Posts Tagged ‘presence’

The further exploits of the rogue distributors

Apr

2013

We can safely say that since we encountered our first rogue, they’ve always commanded a presence in the malware ecosystem. That was, until recently we observed a decrease in rogue activity. That’s not to say they went away altogether – no, not at all – but towards the end of January we did see markedly […]

Category General Written by Microsoft Malware Protection Center 0 Comments

Three Lessons from the South Korea MBR Wiper Attacks

Apr

2013

Last week, we posted some detailed information about the actions that the March 20, 2013 MBR wiper attacks took against systems in South Korea.Today, I’d like to take that and some additional information that has come out about the incident and draw some conclusions about what lessons this attack teaches us.When we look at the […]

Category General Written by Security Intelligence 0 Comments

GrooveMonitor: Another Wiper Copycat?

Dec

2012

Yesterday the Iranian CERT made an announcement about a new piece of wiper-like malware. We detect these files as Trojan.Win32.Maya.a. This is an extremely simplistic attack. In essence, the attacker wrote some BAT files and then used a BAT2EXE tool to turn them into Windows PE files. The author seems to have used (a variant […]

Category General Written by Securelist / Blog 0 Comments

The Latest in IT Security

Posts Tagged ‘presence’

Three Lessons from the South Korea MBR Wiper Attacks

GrooveMonitor: Another Wiper Copycat?

Categories

Featured

Archives

Latest Comments

About Us

Contact Us