Search in HRJ Tricks

Related Posts Plugin for WordPress, Blogger...

Thursday, July 19, 2012

Cross-platform Trojan : Mac, Windows, Linux - Nothing safe !


malwarewinmaclin
Security researchers working for F-Secure have found a web exploit that detects the operating system of the computer and drops a different trojan to match.The attack was first seen on a Columbian transport website which had been hacked by a third party. This malware is known as GetShell.A and requires users to approve a Java applet installation.
It detects if you're running Windows, Mac OS X, or Linux, and then downloads the corresponding malware for your platform. The malicious files developed for each type of OS connect to the same Command & Control server that F-Secure has localized at IP address 186.87.69.249.

Karmina Aquino, a senior analyst with F-Secure said "All three files for the three different platforms behave the same way. They all connect to 186.87.69.249 to get additional code to execute. The ports are 8080, 8081, and 8082 for OSX, Linux and Windows, respectively."

On upcoming 29th July 2012 Security Researchers Sina Hatef Matbue and Arash Shirkhorshidi going to Present "Graviton Malware" , which is Cross Platform Malware in 'The Hackers Conference 2012' . The purpose of 'graviton' is to become an artificial creature which can move between world of windows, world of apples, and world of empire penguins, etc. and remain stealth.

The Windows one sends the following information back to the remote attacker's CPU details, Disk details, Memory usage, OS version, and user name. The Trojan can also download a file and execute it, or open a shell to receive commands. 'Graviton' is a combination of pure 'C' and 'asm'.

1 comment:

  1. Have you ever thought about including a little bit more than just your articles?
    I mean, what you say is valuable and everything. However imagine if you added some
    great pictures or video clips to give your posts more, "pop"! Your content is excellent but with images and video clips, this blog could definitely be one of the best in its niche. Awesome blog!
    My web site - Sandpoint waterfront home for sale

    ReplyDelete