Discovered in December 2009, Trojan.VB.Chinky.U has been popping out of removable devices of all kinds and onto computers ever since. And even though it appears as running in Task Manager, it nonetheless cannot be terminated by simply killing its process from the list.

Read More 1 comments

This week a pretty simple but recyclable IRCBot caught out attention. Besides the fact that it allows remote control of the infected machine by the attacker, the only noteworthy fact about it is that it comes packed, which means that by the click of a button or two, a new morphed version of it can spread unhindered through anti-virus protected PCs.

Read More 0 comments

This week we ended up analyzing a whole infection chain, from its source to the end result. The process starts with a maliciously crafter website and ends with a Backdoor installation. All without the users knowledge or consent obviously.

Read More 0 comments

Who would have thought malware authors can become cultural as well. It seems some are not all into profit and fame. This week we present a “threat” that deletes all files that belong to a certain musical genre called “manele”, replacing them with rap, Christian and patriotic songs downloaded from various sources.

Read More 0 comments

Upon the arrival of Win32.Worm.Downadup, a new worm is spreading in the wild. Having far more abilities then Downadup, but no vulnerability exploitation code, the worm is not as spread as Downadup but is still dangerous.

Read More 0 comments

Have you ever been held for ransom? Hope not, I for one haven't been. How about all the data in your computer? This week there's a high chance it might get encoded by cyber-criminals in order to make you pay a buck for decryption.

Read More 0 comments

1997 also marked the beginning of a new age for malware writers.

Read More 0 comments

Writing malware has become more of a fashion during the new decade, and "outlaw" programmers have started building new communities dedicated to such activities.

Read More 0 comments