Posts Tagged ‘removable drive’

The Java Autorun Worm, Java.Cogyeka (2 of 3)

Jul

2013

ObfuscationsIn my previous blog, I discussed some stealth techniques Java.Cogyeka uses. These stealth techniques are not effective at deceiving users or security researchers, but their use proves that Java malware is continuously improving.Aside from the stealth techniques, Java.Cogyeka is designed to evade security researchers through various obfuscation techniques. Some are effective, some are overdone. Overdone […]

Category General Written by Symantec Security Response Blog 0 Comments

The Java Autorun Worm, Java.Cogyeka (1 of 3)

Jul

2013

Java.CogyekaRecently there has been a lot of attention drawn to the vulnerabilities in Java and how they can lead to malware being created. However, it is worth noting that a vulnerability is not always required for malware to exist, as is the case with Java.Cogyeka. While this threat does not exploit any vulnerability in Java […]

Category General Written by Symantec Security Response Blog 0 Comments

Backdoor.Tranwos Abuses EFS to Prevent Forensic Analysis

Jun

2013

Recently, we discovered a threat that abuses the Encrypting File System (EFS), which Symantec detects as Backdoor.Tranwos. Not only is it trivial for program code to use EFS, it’s also very effective at preventing forensic analysis from accessing the contents of the file.The threat creates the folder %Temp%\s[RANDOM ASCII CHARACTERS] and then calls the EncryptFileW […]

Category General Written by Symantec Security Response Blog 0 Comments

The Latest in IT Security

Posts Tagged ‘removable drive’

The Java Autorun Worm, Java.Cogyeka (2 of 3)

The Java Autorun Worm, Java.Cogyeka (1 of 3)

Backdoor.Tranwos Abuses EFS to Prevent Forensic Analysis

Categories

Featured

Archives

Latest Comments

About Us

Contact Us