The Inevitable Move – 64-bit ZeuS Enhanced With Tor
The more people switch to 64-bit platforms, the more 64-bit malware appears. We have been following this process for several years now. The more people work on 64-bit platforms, the more 64-bit applications that are developed as well. Sometimes these include some very specific applications, for example, banking applications…. If someone wants to hack into an application like this and steal informa
Endpoint Protection - Symantec Enterprise
しばらく前に、シマンテックは W32.Xpaj.B ウイルスの新しい亜種を確認し、その新機能に関する初期段階の詳細と、感染第 1 号の爆発的感染の状況について以前のブログで報告しました。その後さらに解析を進めましたが、結論として爆発的な感染はなく、少なくとも当面の間は W32.Xpaj.B の再来もないと考えるに至っています。 解析から明らかになったのは、以下の点です。 第 1 号に感染したサンプルは、他のサンプルに感染する機能を持っていない。 64 ビットカーネルモードのペイロードは、標的とするプロセスに DLL（ダイナミックリンクライブラリ）をインジェクトするが、その DLL は空である。 感染したサンプルは第 1 号からウイルス本体のコピーを引き継いでおらず、それよりはるかに小さいウイルスによって感染している。 こうしたすべての事実から、この感染第 1 号は単なるテストサンプルであっ
Unpacking mpress’ed PE+ DLLs with the Bochs plugin – Hex Rays
The latest publicly available build of IDA, the processor and plugin SDK including the source code of 30+ processor modules and 20+ loaders. One full year of free downloadable updates. One full year of e-mail technical support. In IDA Pro 6.1 we extended the Bochs debugger plugin to support debugging of 64bit code snippets. With IDA Pro 6.2 it will be possible to debug PE+ executables as well. Sin
Monthly Malware Statistics, May 2011
The following statistics were compiled in May using data from computers running Kaspersky Lab products: 242,663,383 network attacks blocked; 71,334,947 attempted web-borne infections prevented; 213,713,174 malicious programs detected and neutralized on users’ computers; 84,287,491 heuristic verdicts registered. Rogue antivirus for Mac OS X In 2010, we saw an overall decrease in the number of rogue
Rootkit Banker – now also to 64-bit
Yesterday Kaspersky Lab detected the first rootkit banker created to infect 64-bit systems. It was detected in a drive-by-download attack made by Brazilian cybercriminals. We found a malicious Java applet inserted in a popular Brazilian website. The attack was made using a malicious applet in such a way as to infect users running old versions of the JRE (Java Runtime Environment) and was prepared
An unlikely couple: 64-bit rootkit and rogue AV for MacOS
The Virus Lab recently came across a very interesting sample – a downloader containing two drivers and which downloads fake antivirus programs developed for both PC and Mac platforms. The malicious program is downloaded and installed using the BlackHole Exploit Kit. The latter contains exploits targeting vulnerabilities in JRE (CVE-2010-0886, CVE-2010-4452, CVE-2010-3552) and PDF. Both drivers are
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
Federal Trojan’s got a “Big Brother”
TDL4 – Top Bot
TDL4: Beat-root with Confidence
MAX++ sets its sights on x64 platforms
Endpoint Protection - Symantec Enterprise
Error | Infosec