Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le juillet 24, 2016, 00:02:03

Titre: [MMPC]Kovter becomes almost file-less, creates a new file type, and gets some new certificates
Posté par: igor51 le juillet 24, 2016, 00:02:03

Kovter becomes almost file-less, creates a new file type, and gets some new certificates

Trojan:Win32/Kovter is a well-known click-fraud malware which is challenging to detect and remove because of its file-less persistence on infected PCs. In this blog, we will share some technical details about the latest changes we have seen in Kovter?s persistence method and some updates on their latest malvertising campaigns. New persistence method Since June 2016,...
Source: Kovter becomes almost file-less, creates a new file type, and gets some new certificates (https://blogs.technet.microsoft.com/mmpc/2016/07/22/kovter-becomes-almost-file-less-creates-a-new-file-type-and-gets-some-new-certificates/)