F-SECURE: Poker gamers targeted by a rootkit backdoor
http://www.kauppalehti.fi/4/i/eng/releases/press_release.jsp?selected=hex&oid=20060501/11477916927210&lang=EN
Muitakin uhkia rootkitista:
In simple words, Virtual-machine based rootkit (VMBR) is a new type of malicious software that gains qualitatively more control over a system. It is a piece of malware used to control a server or desktop remotely, placed into a new virtual machine in the VMM or as a secondary virtual machine. The virtual machine is totally oblivious of this activity. It is, in effect, isolated from the virtual machine but can continue it’s malicious activities.
The research group used the prototype rootkits to develop four malicious services -— a phishing Web server, a keystroke logger, a service that scans the target file system for sensitive information and a defense counter measure to defeat existing VM-detection systems.
The researchers also used the VM-based rootkits to control the way the target reboots. The malware could also be used to emulate system shutdowns and system sleep states.
Once installed, VMBR can use a separate attack operating system to deploy malware that is invisible from the perspective of the target operating system. As once the target operating system is hoisted into a virtual machine, the rootkit becomes impossible to detect because its state cannot be accessed by security software running in the target system
http://economictimes.indiatimes.com/articleshow/1526312.cms
Tulevaisuus:
Rootkits To Mask Most Malware By 2008
Most users first became aware of them much more recently; in late 2005, news broke that Sony BMG Music was using a rootkit to hide anti-piracy protection on audio CDs played on PCs.
http://www.techweb.com/wire/security/186500795
http://www.kauppalehti.fi/4/i/eng/releases/press_release.jsp?selected=hex&oid=20060501/11477916927210&lang=EN
Muitakin uhkia rootkitista:
In simple words, Virtual-machine based rootkit (VMBR) is a new type of malicious software that gains qualitatively more control over a system. It is a piece of malware used to control a server or desktop remotely, placed into a new virtual machine in the VMM or as a secondary virtual machine. The virtual machine is totally oblivious of this activity. It is, in effect, isolated from the virtual machine but can continue it’s malicious activities.
The research group used the prototype rootkits to develop four malicious services -— a phishing Web server, a keystroke logger, a service that scans the target file system for sensitive information and a defense counter measure to defeat existing VM-detection systems.
The researchers also used the VM-based rootkits to control the way the target reboots. The malware could also be used to emulate system shutdowns and system sleep states.
Once installed, VMBR can use a separate attack operating system to deploy malware that is invisible from the perspective of the target operating system. As once the target operating system is hoisted into a virtual machine, the rootkit becomes impossible to detect because its state cannot be accessed by security software running in the target system
http://economictimes.indiatimes.com/articleshow/1526312.cms
Tulevaisuus:
Rootkits To Mask Most Malware By 2008
Most users first became aware of them much more recently; in late 2005, news broke that Sony BMG Music was using a rootkit to hide anti-piracy protection on audio CDs played on PCs.
http://www.techweb.com/wire/security/186500795
Vastaukset
Vanhimmat
Ei vielä vastauksia
Aloittaja odottaa vastauksia. Kerro oma näkemyksesi ensimmäisenä.