software microsoft | DataProtectionCenter.com

Story of the Cutwail/Pushdo hidden C&C server

25

Jun

2013

This is a loose sequel to the Cutwail botnet analysis blogpost published on the malwaremustdie.blogspot.com. In this blogpost I will primarily focus on the downloaded PE executable itself (SHA256: 5F8FCC9C56BF959041B28E97BFB5DB9659B20A6E6076CFBA8CB2D591184C9164) and the network traffic that it generates. I will also reveal a hidden C&C server.But first let’s quickly go through the things it does at […]

Category General Written by Avast! blog 0 Comments

New worm infects removable drives.

04

Jun

2013

Yet another worm that infects removable drives was discovered. The Win32/SillyAutorun.FTW was recently found in the wild. The worm is written with Microsoft Visual Studio and uses injection engine – worm’s code overwrites the original code in memory. When it runs on infected machine, it firstcopies itself to %ApplicationData%\E-73473-3674-74335\msnrsmsn.exe; where %ApplicationData% is application data folder […]

Category General Written by GLOBAL SECURITY ADVISOR RESEARCH BLOG 0 Comments

Grum lives!

22

May

2013

Grum, one of the largest spamming botnets, suspected to be responsible for over 17% of worldwide spam (as described here), which was “killed” in July 2012, still lives. We have been tracking its activity since January 2013. We can confirm spiderlab’s doubts about the grum killing published in March 2013. The following article provides some details […]

Category General Written by Avast! blog 0 Comments

The Latest in IT Security

Posts Tagged ‘software microsoft’

Story of the Cutwail/Pushdo hidden C&C server

New worm infects removable drives.

Grum lives!

Categories

Featured

Archives

Latest Comments

About Us

Contact Us