SEARCH RESULTS
 
Showing 1-6 of 6 records
1
 
Expand article

Quality and Assurance in Malware Attacks

The Article has images
2008-04-02 11:49:20 by HASH0x8b57b3c in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...VirusTotal submission to verify the low detecting rate of the newly generated server, something really had to change - like it did At the beginning of 2008, VirusTotal which is among the most widely known and used such multiple antivirus scanner as a web service, decided to remove the " Do not distribute the sample " option, directly...
 
Tags: malware authors start, malware authors, malware, authors, services, malware services, start, malware product, malware campaign
 
 
 
 
Expand article

What? You Are Releasing Untested Malware?

2008-04-07 16:24:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...VirusTotal submission to verify the low detecting rate of the newly generated server, something really had to change - like it did So, imagine a malicious "clone" of VirusTotal that is launched by an enterprising criminal to provide "a valuable service" of malware testing to a cybercrime community? :-) : "A small fee for testing please....
 
Tags: malware, modern malware, built-in virustotal submission, virustotal, antivirus solution, popular piece, amateur, final nail, valuable service
 
 
 
 
Expand article

The Shark Malware - New Version's Coming

The Article has images
2007-12-09 20:44:58 by HASH0x899fff8 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...VirusTotal submission, process injection, and with the new version promoted to have a built-in rootkit capabilities, next to its Vista compatibility, let's ask the ultimate question - is it a RAT, or is it a malware? That's the rhetorical question
 
Tags: malware, version, shark3 window, shark3, diy malware, rhetorical question, shark3 keylogger, built-in rootkit capabilities, rat
 
 
 
 
Expand article

The Random JS Malware Exploitation Kit

The Article has images
2008-01-15 20:49:56 by HASH0x8be7244 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...VirusTotal just like every sample I ever came across to in the incident responses -- attempt to connect to 206.53.51.75 , 206.53.56.30 , and back39409404.com , making naughty web requests such as 206.53.51.75/cgi-bin/options.cgi?user id=3335213046&socks=6267&version id=904&passphrase=fkjvhsdvlksdhvlsd&crc=3c64cb2e uptime=00:00:58:38 ...
 
Tags: random, malware, random attack approach, cgi, local malware locations, cgi-bincert, cgi-binss, cgi-binoptions, cgi-binpstore
 
 
 
 
Expand article

Keylogger Or False Positive Detected in Wall-E Demo?

The Article has images
2008-08-03 11:23:19 by Christopher Boyd in SpywareGuide Greynets Blog
...Virustotal.com , because of their 10MB file size limit Sorting this one out might take a while Update - some people are saying AVAST flags the file , too
 
Tags: demo, wall-e demo, 177mb versions, versions, wall-e demo game, 177mb, file, 177mb file, 10mb file
 
 
 
 
Expand article

The Commoditization of Anti Debugging Features in RATs

The Article has images
2008-09-03 07:46:00 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...Virustotal submission for the newly generated server, antivirus software "killing" and firewall bypassing capabilities Taking a peek into some of commodity features aiming to make it harder to analyze the malware found in pretty much all the average DIY malware builders available at the disposal at the average script kiddies, one of the...
 
Tags: anti, anti vmware, anti norman sandbox, common malware tools, malware, anti virtualpc, malware coders, anti anubis sandbox, malware modulators
 
 
 
 
 
Showing 1-6 of 6 records
1
 
RELATED VIDEO
Expand / Minimize
SecurityRatty FAQ
Sergey Zarubin, 31yo
CISSP, CCSP
Moscow, Russia