Showing posts with label virus. Show all posts

Massive Volume of Ransomware Downloaders being Spammed


Spam Research Database saw around 4 million malware spams in the last seven days, and the malware category as a whole accounted for 18% of total spam arriving at our spam traps. The graph below shows hourly spam traffic for the malware category for the past 30 days - note the relatively low levels of activity to the left, and huge peaks on the right, representing the ransomware downloader campaigns. As you can see the campaigns are not continuous, but concentrated bursts, with peaks of 200K emails hitting servers in a single hour. 



[Via]

The most sophisticated virus - TDL4 rootkit

Something new and unfamiliar is going on the world virus ecosystem. New type of viruses are using a new technique: they create a new, hidden and unreachable partition ... !!! ... The virus is using only 50MB of space on our hard disc, so its not noticeable on a hard disc of 100s of GB.  By that technique they avoiding anti-viruses detection and their self protection is a reality! The name is TDL4 rootkit and recently ESET antivirus announced that now is going on the next phase and its code is re-written from the scratch.

The only thing to be changed is the partition table. When the infected machine is next booted control is passed to the malicious VBR (the VBR of the TDL4 partition) right after execution of the MBR code and before the OS bootloader components are loaded. This allows the malware to gain control before the operating system does.



[Eset]