timestamp | DataProtectionCenter.com

Olmasco bootkit: next circle of TDL4 evolution (or not?)

18

Oct

2012

ESET – Olmasco (also known as SST, MaxSS) is a modification of the TDL4 bootkit family that we’ve been aware of since summer 2011. We started to track a new wave of activity from a new Olmasco dropper at the end of this summer. This bootkit family was the second to use VBR (Volume Boot […]

Category General Written by ESET ThreatBlog 0 Comments

Symantec Protects Against Files Misusing Adobe Code Signing Certificate

28

Sep

2012

On September 27, Adobe posted a blog stating that the company is investigating the inappropriate use of an Adobe code signing certificate for the Windows operating system. Symantec is aware of this issue and has added protection to detect any unauthorized file signed by the Adobe certificate in question as Trojan.Abe. We are currently aware […]

Category General Written by Symantec Security Response Blog 0 Comments

Rovnix bootkit framework updated

14

Jul

2012

We have been tracking the activity of the Rovnix bootkit family since April 2011. Rovnix was the first bookit family to use VBR (Volume Boot Record) infection (NTFS bootstrap code) for loading unsigned kernel-mode drivers on x64 (64 bit) platforms. The reason for exploring further is the desire of the Rovnix developers to bypass antivirus […]

Category General Written by ESET ThreatBlog 0 Comments

The Latest in IT Security

Posts Tagged ‘timestamp’

Olmasco bootkit: next circle of TDL4 evolution (or not?)

Symantec Protects Against Files Misusing Adobe Code Signing Certificate

Rovnix bootkit framework updated

Categories

Featured

Archives

Latest Comments

About Us

Contact Us