Paranoid Furtim Malware Checks for 400 Security Products Before Execution

Minimalist · May 17, 2016

A security researcher that goes online only by the nickname of FireFOX (@hFireF0X) has discovered and analyzed a unique malware family that pays a lot of attention to remaining undetected, and not to having great features or efficient data exfiltration procedures.

The researcher named the malware Furtim, the Latin word for "stealthy" and tracked down some of its command & control servers to a Russian domain, which resolves back to a Ukrainian IP.

At the time of his analysis, despite managing to break down a large part of Furtim's mode of operation, FireFOX didn't manage to discover how crooks are spreading the malware, how it gains an initial foothold on the infected devices, or what kind of targets it is seeking.
Click to expand...

http://news.softpedia.com/news/para...curity-products-before-execution-504130.shtml

ronjor · May 18, 2016

18 May 2016 News Phil Muncaster UK / EMEA News Reporter , Infosecurity Magazine
Security experts are warning of newly discovered credential-stealing malware which prioritizes stealth, scoring a 0% detection rate in VirusTotal.
Click to expand...

http://www.infosecurity-magazine.com/news/experts-warn-of-superstealthy/

TairikuOkami · May 18, 2016

So basically, it focuses on PCs with no security software installed, disabling CMD, taskmanager and such probably in order to create a stable botnet.

Log in or Sign up

Paranoid Furtim Malware Checks for 400 Security Products Before Execution

Minimalist Registered Member

ronjor Global Moderator

TairikuOkami Registered Member

Log in or Sign up

Paranoid Furtim Malware Checks for 400 Security Products Before Execution

Minimalist Registered Member

ronjor Global Moderator

TairikuOkami Registered Member

Useful Searches