Incidents

Adware or adwars?

First time in my life I see how different AdWares fight each other. A new 21KB Win32 executable first removes data files and registry keys which belongs to EliteBar AdWare (according to KAV anti-AdWare databases) and then opens one of two Ad URLs. It seems that the AdWare market is going to be a hot one and different AdWare coders face a lot of competition from each other. Obviously they will fight. Remember Bagle-NetSky-Mydoom war?..

We detect this adware as TrojanClicker.Win32.Agent.af.

Adware or adwars?

Your email address will not be published. Required fields are marked *

 

Reports

MoonBounce: the dark side of UEFI firmware

At the end of 2021, we inspected UEFI firmware that was tampered with to embed a malicious code we dub MoonBounce. In this report we describe how the MoonBounce implant works and how it is connected to APT41.

Subscribe to our weekly e-mails

The hottest research right in your inbox