Articles Archive for 22 July 2009
New KOOBFACE Upgrade Makes It Takedown-Proof
Posted in Information and Removal on 22 July 2009
Posted in Information and Removal on 22 July 2009
Early this week, the KOOBFACE Command and Control (C&C) servers issued a new command to its downloader component. This new command identifies a list of IP addresses to be used by the downloader component as Web or relay proxies to retrieve subsequent commands and components.
In the old KOOBFACE architecture (see Figure 1), the downloader [...]
Post from: TrendLabs | Malware Blog - by Trend Micro
