Adwind Trojan circumvents antivirus software to infect your PC

guest · Sep 24, 2018

Adwind Trojan circumvents antivirus software to infect your PC
A spam campaign spreading the RAT uses a number of tricks to fool signature-based antivirus solutions.
September 24, 2018
https://www.zdnet.com/article/this-...-tricks-antivirus-software-to-infect-your-pc/

Adwind, a Remote Access Trojan (RAT) previously connected to attacks against industries worldwide, is back with a new toolkit designed to trick antivirus programs into allowing the malware to exploit systems.

On Monday, cybersecurity researchers from Cisco Talos, together with intelligence partner ReversingLabs, released the results of an investigation into the Adwind Trojan's latest campaign.

The phishing campaign sends malicious messages containing a .CSV or .XLT attachment -- both of which are opened by Excel as default.

Cisco Talos says the new technique has been implemented in the name of obfuscation. The beginning of the file contains no header to be checked -- which may, in turn, confuse antivirus software which expects ASCII characters to be present in the CSV format, for example.
Click to expand...

Log in or Sign up

Adwind Trojan circumvents antivirus software to infect your PC

guest Guest

Log in or Sign up

Adwind Trojan circumvents antivirus software to infect your PC

guest Guest

Useful Searches