Lucene search
+L

5 matches found

ThreatPost
ThreatPost
added 2014/02/03 5:28 p.m.28 views

GameOver Zeus Now Using Encryption to Bypass Detection

Cybercriminals have begun to tweak the way the GameOver Zeus Trojan is being delivered to users’ machines, making it easier for the banking malware to evade detection and steal victims’ credentials. To get the job done the malware has been working in tandem with the malware Upatre. For about a we...

0.5AI score
Exploits0References6
ThreatPost
ThreatPost
added 2012/08/10 3:57 p.m.6 views

Researchers Release Detection Tool For Gauss Malware's Palida Narrow Font

One of the many mysteries around the discovery of the Gauss malware is why the tool installs a new font called Palida Narrow on infected machines. Researchers have been unable to figure out yet what the purpose of the font is, but as its presence on a PC is a good indicator of a Gauss infection,...

1AI score
Exploits0References4
ThreatPost
ThreatPost
added 2012/05/31 4:3 p.m.15 views

DHS Says No Evidence That Flame Targets Industrial Systems, But Urges Caution

In and advisory, the Department of Homeland Security’s Industrial control System ICS CERT said that it doesn’t believe the Flame malware targets industrial control systems ICS or SCADA systems, but the group advised critical infrastructure owners to be on alert. The advisory, issued Wednesday,...

0.8AI score
Exploits0
ThreatPost
ThreatPost
added 2011/11/10 4:17 p.m.66 views

New Toolkit Able to Track and Trace Duqu Worm

The Hungarian research facility that helped discover Duqu, the much-blogged about Trojan, has now released an open-source toolkit that can be used to help detect traces and instances of the worm. The Laboratory of Cryptography and System Security CrySys at the Budapest University of Technology an...

9.3CVSS8.3AI score0.99945EPSS
Exploits33References4
ThreatPost
ThreatPost
added 2011/11/01 6:33 p.m.9 views

Duqu Installer Contains Windows Kernel Zero Day

A newly discovered installer for the Duqu malware includes an exploit for a previously unknown vulnerability in the Windows kernel that allows remote code execution. Microsoft is working on a fix for the kernel vulnerability right now. The exact location and nature of the flaw isn’t clear right...

0.4AI score
Exploits0References6
Rows per page
Query Builder