How Would You Like Your Bagle Done, with Rootkits on the Side?


Rootkit development has had such a lull in recent months that we were beginning to wonder if the technique had suddenly become passť. The last few days may have changed our opinion. With the discovery of three new cases we are now very curious to see what the future will bring.

One of the new cases, Gurong.A, is based on Mydoom code. See our earlier post for more technical details. The other two cases are variants of Bagle. Both Mydoom and Bagle are what we could call 'heavy hitters' in the field. F-Secure : News from the Lab

Linked by shanmuga Friday, 24th March 2006 10:35PM