New Backdoor Ddos Malware Co-Existing On Gh0Strat-Infected Machines

snoopy · Nov 6, 2012

Tuesday, November 6, 2012
New Backdoor DDoS Malware Co-Existing on Gh0stRAT-Infected Machines

Gh0st RAT has a new roommate. A new backdoor called ADDNEW has been discovered on machines infected with the Gh0st remote access Trojan, adding new distributed denial of service attack capabilities, as well as a feature that targets passwords and credentials stored on the Firefox browser.

Gh0st RAT is a notorious piece of malware having been used in the Aurora attacks on Google, Adobe and other large manufacturers and technology companies. Most recently, new variants of Gh0st were present in water-holing attacks called VOHO analyzed by RSA Security’s FirstWatch research team.

Attacking Windows machines, Gh0st is essentially espionage software with phone-home capabilities to a command-and-control server. Attackers can remotely control Gh0st-infected machines and drop additional malware such as keyloggers and other surveillance capabilities against high-value targets in industries such as finance, the government or military.
Click to expand...

More here: https://threatpost.com/en_us/blogs ew-backdoor-ddos-malware-co-existing-gh0strat-infected-machines-110612

Log in or Sign up

New Backdoor Ddos Malware Co-Existing On Gh0Strat-Infected Machines

snoopy Registered Members

Share This Page

Log in or Sign up

New Backdoor Ddos Malware Co-Existing On Gh0Strat-Infected Machines

snoopy Registered Members

Share This Page

Useful Searches