File Infectors and ZBOT Team Up, Again
File infectors and ZBOT don’t usually go together, but we recently saw a case where these two kinds of threats did. This particular file infector – PE_PATNOTE.A (MD5 871246d00caffdbed56b1374975c368e) – appends its code to all executable files on the infected system, like so: Figure 1. Before infection Figure 2. After infection What does this code […]Post from: Trendlabs Security Intelligence Blog - by Trend Micro
File Infectors and ZBOT Team Up, Again
Source: File Infectors and ZBOT Team Up, Again (http://feeds.trendmicro.com/~r/Anti-MalwareBlog/~3/n_0oP1-kYzo/)