World's stealthiest rootkit gets a makeover

  1. Kedar

    Kedar Moderator Staff Member Moderator Elite Member

    Joined:
    Jun 2, 2010
    Posts:
    9,444
    Likes Received:
    819
    Location:
    India
    Local time:
    18:12
    My System
    Loading...

    One of the world's more advanced pieces of malware has just gotten a makeover that could make it even more resistant to takedown efforts, security researchers said.

    An analysis of recent updates to the TDL4 rootkit, which is also known as TDSS and Alureon, shows that components including its kernel-mode driver and user-mode payload have been rewritten from scratch, researchers from antivirus provider ESET blogged earlier this week.

    The code overhaul may mean that operators of TDL4, which is used to force keyloggers, adware, and other malicious programs onto compromised machines, may have started providing services to other crimeware groups.
    The makeover includes changes to the way TDL4 attempts to remain undetected by antivirus programs and other defenses.

    Newer versions create a hidden partition at the end of the infected machine's hard disk and set it to active. This ensures that malicious code stashed in it is executed before the Windows operating system is run....


    World's stealthiest rootkit gets a makeover ? The Register
  2. Belahzur

    Belahzur Banned

    Joined:
    May 19, 2010
    Posts:
    2,279
    Likes Received:
    102
    Local time:
    13:42
    My System
    Loading...

    Open for discussion.
Similar Threads
Forum Title Date
Security News World's first Win 8 malware 'bootkit' to debut next week Nov 18, 2011
Security News World's most advanced rootkit penetrates 64-b Nov 16, 2010