[Trend]File Infectors and ZBOT Team Up, Again

[igor51]

File Infectors and ZBOT Team Up, Again

File infectors and ZBOT don’t usually go together, but we recently saw a case where these two kinds of threats did. This particular file infector – PE_PATNOTE.A (MD5 871246d00caffdbed56b1374975c368e) – appends its code to all executable files on the infected system, like so: Figure 1. Before infection Figure 2. After infection What does this code […]

Post from: Trendlabs Security Intelligence Blog - by Trend Micro

File Infectors and ZBOT Team Up, Again

Source: File Infectors and ZBOT Team Up, Again