This worm spreads a fileless version of the Trojan Bladabindi

Discussion in 'malware problems & news' started by Minimalist, Nov 27, 2018.

  1. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    10,980
    Location:
    Here
  2. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    11,523
    Location:
    The Netherlands
    Like I said, file-less doesn't mean it uses any magic, it will still run tr.exe and powershell.exe, and they will both trigger suspicious behavior. So only AV's with bad behavior blockers might have a hard time stopping it.
     
Loading...
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.