time stamp | DataProtectionCenter.com

The Powerloader 64-bit update based on leaked exploits

27

Aug

2013

A few months ago on this blog I described PowerLoader functionality including an interesting way for privilege escalation into the explorer.exe system process. The leaked PowerLoader code is also used in other malware families. For example the Win32/Gapz dropper is based on leaked PowerLoader code. In August 2013 we have tracked a new modification of […]

Category General Written by We Live Security 0 Comments

Gapz and Redyms droppers based on Power Loader code

19

Mar

2013

Power Loader is a special bot builder for making downloaders for other malware families and yet another example of specialization and modularity in malware production. The first time Power Loader was detected was in September 2012, using the family detection name Win32/Agent.UAW. This bot builder has been used for developing Win32/Gapz droppers (Win32/Gapz: steps of […]

Category General Written by We Live Security 0 Comments

Kernel Vulnerabilities and Zero Days: a Duqu Update

02

Nov

2011

We discussed much of the unfolding Duqu attack in our previous post. Some new light has recently illuminated some missing pieces to this interesting attack. Researchers at CrySys Labs in Hungary have disclosed information about a Word document that is purported to be the installer file for the Duqu attacks. The document loads a kernel […]

Category General Written by Blog Central > McAfee Labs 0 Comments

The Latest in IT Security

Posts Tagged ‘time stamp’

The Powerloader 64-bit update based on leaked exploits

Gapz and Redyms droppers based on Power Loader code

Kernel Vulnerabilities and Zero Days: a Duqu Update

Categories

Featured

Archives

Latest Comments

About Us

Contact Us