Corkow: Analysis of a business-oriented banking Trojan

SweX · Feb 27, 2014

In his blog post last week, Graham Cluley introduced the Win32/Corkow banking Trojan. The malware, which has been in the wild since at least 2011, has demonstrated continuous activity in the past year, infecting thousands of users. Version numbering of the various Trojan modules is another indicator that the malware authors are continually developing the trojan.

In this post, we expand on the information mentioned by Graham and provide additional technical details...
Click to expand...

http://www.welivesecurity.com/2014/02/27/corkow-analysis-of-a-business-oriented-banking-trojan/

siljaline · Feb 28, 2014

Klocwork: Our source code analyzer caught Apple's 'gotofail' bug

It was a single repeated line of code -- "goto fail" -- that left millions of Apple users vulnerable to Internet attacks until the company finally fixed it Tuesday.
That OS X security vulnerability, which also affected iOS users, arose out of Apple's custom implementation of a security standard known as SSL/TLS. By including the "goto fail" line twice in a row, the normal error check for some types of encryption signatures fails.
Click to expand...

http://news.cnet.com/8301-1009_3-57...rce-code-analyzer-caught-apples-gotofail-bug/

Log in or Sign up

Corkow: Analysis of a business-oriented banking Trojan

SweX Registered Member

siljaline Registered Member

Log in or Sign up

Corkow: Analysis of a business-oriented banking Trojan

SweX Registered Member

siljaline Registered Member

Useful Searches