NEWS HckPk Malware Wrapper

Discussion in 'other security issues & news' started by Ice_Czar, Mar 2, 2007.

Thread Status:
Not open for further replies.
  1. Ice_Czar

    Ice_Czar Registered Member

    May 21, 2002
    Boulder Colorado
    It appears that for the better part of three months some malware authors have been employing a modular bit of code as an add on to their baseline exploit package in order to disguise its signature. Originally taken as unique variants its now recognized as a masking program added to a static exploit. It appears the Storm worm employed it to transmorph 1,500 times in the first weekend, while the Dref and Dorf worms have approx 6,000 signature variants within a period of a month.

    Last edited: Mar 2, 2007
Thread Status:
Not open for further replies.