Hiding in Plain Sight: The FAKEM Remote Access Trojan
The perpetrators of targeted attacks want to maintain a persistent presence in a target network in order to extract sensitive data when needed. To maintain this, attackers seek to blend in with normal network traffic and use ports allowed by firewalls. Frequently, the malware used in targeted attacks uses HTTP and HTTPS to appear like [...]Post from: Trendlabs Security Intelligence Blog - by Trend Micro
Hiding in Plain Sight: The FAKEM Remote Access Trojan
Source: Hiding in Plain Sight: The FAKEM Remote Access Trojan (http://feeds.trendmicro.com/~r/Anti-MalwareBlog/~3/CsiZ91QGjGQ/)