Android G2 Phone Can Roll Back Jailbreaks

Since at least the time of the release of the first generation Apple iPhone, sophisticated smartphone users have been working diligently to jailbreak their devices in order to load their own software, install third-party applications and make other modifications. Now, one Android device, the G2...

Stuxnet Analysis Supports Iran-Israel Connections

VANCOUVER – A Symantec researcher filled in more critical details about the Stuxnet worm here, demonstrating the worm’s ability to take control of programmable logic controllers PLCs by Siemens Inc. and disable machinery connected to them. Liam O’Murchu of Symantec, speaking at the Virus Bulletin...

Rootkit Variant Now Targets 64-Bit Windows

Alureon rootkit is back, and has acquired the ability to hijack computers running 64-bit versions of Microsoft Windows, proclaimed security researcher Marco Giuliani. Read the full article. Help Net Security...

ATM Makers Release Fixes for 'Jackpotting' Flaw

Two ATM manufacturers have released software updates to address the remotely exploitable vulnerabilities in their machines’ firmware that IOActive researcher Barnaby Jack demonstrated line on stage at the Black Hat conference last month. In response to the demonstration, in which Jack was able to...

Mobile Devices Drawing More Attackers' Attention

As mobile devices such as iPhones, BlackBerrys, Android phones and others have become more sophisticated and easy to use, many users have made them their main computing and Web-browsing devices. And that evolution naturally has caught the attention of attackers who have begun tailoring more and...

Android Rootkit Demonstrated at DEFCON

IT security researchers Nicholas Percoco and Christian Papathanasiou demonstrated what they claim is the first rootkit for Android. Their aim was to show how slight the obstacles to the development of a such a rootkit are and how powerful the result can be. Read the full article. The H Security...

Persistent, Covert Malware Causing Major Damage

LAS VEGAS–Security technology and practice have advanced quite a bit in the past few years, but one thing that has become clear is that whatever gains have been made are just not keeping pace with the innovation of attackers. The advances being made by malware authors and crimeware gangs are...

Possible New Rootkit Has Drivers Signed by Realtek

Security researchers have identified a new suspicious program that is copying itself to PCs via USB mass storage devices and is digitally signed with the certificate of Realtek Semiconductor, a major manufacturer of computer products based in Taiwan. The program, known as Stuxnet, looks like a...

Android Rootikit To Be Shown at DefCon

Researchers have developed a kernel-level Android rootkit in the form of a loadable kernel module and will demonstrate the proof of concept exploit at the upcoming DefCon conference. Read the demo statement. DefCon.org...

Microsoft Battles Alureon Rootkit

For the second month in a row, Microsoft has tried to eradicate a mutating rootkit that has blocked some Windows users from installing security updates. Read the full article. Computerworld...

MS10-015 Restart Issues Are the Result of Rootkit Infection

Microsoft on Thursday confirmed that the blue screen of death issues that affected a slew of users after the latest batch of Patch Tuesday updates is the result of an existing infection by the Alureon rootkit. There was widespread speculation after the patch release that simply installing the...

Rootkit Possible Culprit in XP BSoD

There are indications that the system crashes and the dreaded blue screen of death BSoD that many Microsoft Windows users reported suffering after installing this week’s batch of security updates may be caused at least in part by malware infestations on the affected machines. Read the full articl...

Dogrobot Malware Penetrates System Restore on Windows

GENEVA — Cyber crime gangs in China are penetrating the hard disk recovery cards on computers in Internet cafes and using a combination of zero-day flaws, rootkits and ARP spoofing techniques to steal billions of dollars worth of online gaming credentials. According to Microsoft anti-virus...

Radix Anti-Rootkit SDTHLPR.sys IOCTL Handling Privilege Escalation

Radix Anti-Rootkit，存在漏洞，本地用户利用提升自己的权限。 该漏洞是由于一个在SDTHLPR.sys内核驱动在处理IOCTL时的错误。这可以被利用来破坏内核内存和内核空间中执行任意代码通过一个特制的IOCTL。 Radix Anti-Rootkit 1.x Update to version 1.0.0.9. http://usec.at/download.php...

ASUS Eee PC and other series: BIOS SMM privilege escalation vulnerabilities

Numerous System Management Mode SMM privilege escalation vulnerabilities in ASUS motherboards including Eee PC series Release Date: 07.08.09 Timeline: March 08, 2009: first attempt to contact vendor, no response March 16, 2009: second attempt to contact vendor, no response July 18, 2009: CERT...

Rootkit techniques the main principle of explanation-vulnerability warning-the black bar safety net

Article author: hackisle rootkit main categories: Application-level-kernel-the hardware level Early rootkits mainly for application-level rootkits application-level rootkits mainly by replacing the login, ps, ls, netstat and other system tools, or modify. rhosts etc system configuration files, et...

EPSON Status Monitor 3 - Local Privilege Escalation

------- EPSON Status Monitor 3 local privilege escalation vulnerability -------- by Nine:Situations:Group::bruiser site: http://retrogod.altervista.org/ -------------------------------------------------------------------------------- After that pyrokinesis found:...

EPSON Status Monitor 3 Local Privilege Escalation Vulnerability

Exploit for unknown platform in category local exploits =============================================================== EPSON Status Monitor 3 Local Privilege Escalation Vulnerability =============================================================== ------- EPSON Status Monitor 3 local privilege...

Update Protections against Recent Malware Threats (28-Apr-09)

The update includes new protections against 4 recent malware threats:Trojan-Dropper: IRC.TKB - Trojan-Dropper IRC.TKB is an application that installs malicious files and downloads unwanted content to user's host without user's consent. Backdoor: Trojan.TDSS.1.Gen - Trojan.TDSS.1.Gen is a backdoor...

Analysis Backdoor detection techniques-vulnerability warning-the black bar safety net

First of all we want to know what is the backdoor program? On the network common to the“back door”to explain, in fact, we can use a very simple word to summarize it: the back door is left in the computer system, for a particular use by a particular way of controlling a computer system of the...