<?xml version="1.0"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
	<id>https://www.botnets.fr/index.php?action=history&amp;feed=atom&amp;title=The_mystery_of_Duqu%3A_part_three</id>
	<title>The mystery of Duqu: part three - Revision history</title>
	<link rel="self" type="application/atom+xml" href="https://www.botnets.fr/index.php?action=history&amp;feed=atom&amp;title=The_mystery_of_Duqu%3A_part_three"/>
	<link rel="alternate" type="text/html" href="https://www.botnets.fr/index.php?title=The_mystery_of_Duqu:_part_three&amp;action=history"/>
	<updated>2026-10-24T00:01:34Z</updated>
	<subtitle>Revision history for this page on the wiki</subtitle>
	<generator>MediaWiki 1.43.11</generator>
	<entry>
		<id>https://www.botnets.fr/index.php?title=The_mystery_of_Duqu:_part_three&amp;diff=3058&amp;oldid=prev</id>
		<title>Eric.freyssinet: Text replacement - &quot; www.securelist.com&quot; to &quot;&quot;</title>
		<link rel="alternate" type="text/html" href="https://www.botnets.fr/index.php?title=The_mystery_of_Duqu:_part_three&amp;diff=3058&amp;oldid=prev"/>
		<updated>2015-02-07T16:57:58Z</updated>

		<summary type="html">&lt;p&gt;Text replacement - &amp;quot; www.securelist.com&amp;quot; to &amp;quot;&amp;quot;&lt;/p&gt;
&lt;table style=&quot;background-color: #fff; color: #202122;&quot; data-mw=&quot;interface&quot;&gt;
				&lt;col class=&quot;diff-marker&quot; /&gt;
				&lt;col class=&quot;diff-content&quot; /&gt;
				&lt;col class=&quot;diff-marker&quot; /&gt;
				&lt;col class=&quot;diff-content&quot; /&gt;
				&lt;tr class=&quot;diff-title&quot; lang=&quot;en&quot;&gt;
				&lt;td colspan=&quot;2&quot; style=&quot;background-color: #fff; color: #202122; text-align: center;&quot;&gt;← Older revision&lt;/td&gt;
				&lt;td colspan=&quot;2&quot; style=&quot;background-color: #fff; color: #202122; text-align: center;&quot;&gt;Revision as of 16:57, 7 February 2015&lt;/td&gt;
				&lt;/tr&gt;&lt;tr&gt;&lt;td colspan=&quot;2&quot; class=&quot;diff-lineno&quot; id=&quot;mw-diff-left-l5&quot;&gt;Line 5:&lt;/td&gt;
&lt;td colspan=&quot;2&quot; class=&quot;diff-lineno&quot;&gt;Line 5:&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class=&quot;diff-marker&quot;&gt;&lt;/td&gt;&lt;td style=&quot;background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;|Licence=&lt;/div&gt;&lt;/td&gt;&lt;td class=&quot;diff-marker&quot;&gt;&lt;/td&gt;&lt;td style=&quot;background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;|Licence=&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class=&quot;diff-marker&quot;&gt;&lt;/td&gt;&lt;td style=&quot;background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;|Video=&lt;/div&gt;&lt;/td&gt;&lt;td class=&quot;diff-marker&quot;&gt;&lt;/td&gt;&lt;td style=&quot;background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;|Video=&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class=&quot;diff-marker&quot; data-marker=&quot;−&quot;&gt;&lt;/td&gt;&lt;td style=&quot;color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;|Link=http://www.securelist.com/en/blog/208193206/The_Mystery_of_Duqu_Part_Three &lt;del style=&quot;font-weight: bold; text-decoration: none;&quot;&gt;www.securelist.com&lt;/del&gt;&lt;/div&gt;&lt;/td&gt;&lt;td class=&quot;diff-marker&quot; data-marker=&quot;+&quot;&gt;&lt;/td&gt;&lt;td style=&quot;color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;|Link=http://www.securelist.com/en/blog/208193206/The_Mystery_of_Duqu_Part_Three&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class=&quot;diff-marker&quot;&gt;&lt;/td&gt;&lt;td style=&quot;background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;|Author=Alexander Gostev,  &lt;/div&gt;&lt;/td&gt;&lt;td class=&quot;diff-marker&quot;&gt;&lt;/td&gt;&lt;td style=&quot;background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;|Author=Alexander Gostev,  &lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td class=&quot;diff-marker&quot;&gt;&lt;/td&gt;&lt;td style=&quot;background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;|NomRevue=Securelist&lt;/div&gt;&lt;/td&gt;&lt;td class=&quot;diff-marker&quot;&gt;&lt;/td&gt;&lt;td style=&quot;background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;&quot;&gt;&lt;div&gt;|NomRevue=Securelist&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;

&lt;!-- diff cache key wiki:diff:1.41:old-2067:rev-3058:php=table --&gt;
&lt;/table&gt;</summary>
		<author><name>Eric.freyssinet</name></author>
	</entry>
	<entry>
		<id>https://www.botnets.fr/index.php?title=The_mystery_of_Duqu:_part_three&amp;diff=2067&amp;oldid=prev</id>
		<title>Eric.freyssinet: 1 revision imported</title>
		<link rel="alternate" type="text/html" href="https://www.botnets.fr/index.php?title=The_mystery_of_Duqu:_part_three&amp;diff=2067&amp;oldid=prev"/>
		<updated>2015-02-07T14:23:45Z</updated>

		<summary type="html">&lt;p&gt;1 revision imported&lt;/p&gt;
&lt;table style=&quot;background-color: #fff; color: #202122;&quot; data-mw=&quot;interface&quot;&gt;
				&lt;col class=&quot;diff-marker&quot; /&gt;
				&lt;col class=&quot;diff-content&quot; /&gt;
				&lt;col class=&quot;diff-marker&quot; /&gt;
				&lt;col class=&quot;diff-content&quot; /&gt;
				&lt;tr class=&quot;diff-title&quot; lang=&quot;en&quot;&gt;
				&lt;td colspan=&quot;2&quot; style=&quot;background-color: #fff; color: #202122; text-align: center;&quot;&gt;← Older revision&lt;/td&gt;
				&lt;td colspan=&quot;2&quot; style=&quot;background-color: #fff; color: #202122; text-align: center;&quot;&gt;Revision as of 14:23, 7 February 2015&lt;/td&gt;
				&lt;/tr&gt;&lt;tr&gt;&lt;td colspan=&quot;4&quot; class=&quot;diff-notice&quot; lang=&quot;en&quot;&gt;&lt;div class=&quot;mw-diff-empty&quot;&gt;(No difference)&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;
&lt;!-- diff cache key wiki:diff:1.41:old-2066:rev-2067 --&gt;
&lt;/table&gt;</summary>
		<author><name>Eric.freyssinet</name></author>
	</entry>
	<entry>
		<id>https://www.botnets.fr/index.php?title=The_mystery_of_Duqu:_part_three&amp;diff=2066&amp;oldid=prev</id>
		<title>Eric.freyssinet: Remplacement de texte — « |Editor=Kaspersky lab Lab » par « |Editor=Kaspersky lab »</title>
		<link rel="alternate" type="text/html" href="https://www.botnets.fr/index.php?title=The_mystery_of_Duqu:_part_three&amp;diff=2066&amp;oldid=prev"/>
		<updated>2014-08-27T19:13:55Z</updated>

		<summary type="html">&lt;p&gt;Remplacement de texte — « |Editor=Kaspersky lab Lab » par « |Editor=Kaspersky lab »&lt;/p&gt;
&lt;p&gt;&lt;b&gt;New page&lt;/b&gt;&lt;/p&gt;&lt;div&gt;{{Publication&lt;br /&gt;
|Image=&lt;br /&gt;
|Legend=&lt;br /&gt;
|Document=&lt;br /&gt;
|Licence=&lt;br /&gt;
|Video=&lt;br /&gt;
|Link=http://www.securelist.com/en/blog/208193206/The_Mystery_of_Duqu_Part_Three www.securelist.com&lt;br /&gt;
|Author=Alexander Gostev, &lt;br /&gt;
|NomRevue=Securelist&lt;br /&gt;
|Date=2 novembre 2011&lt;br /&gt;
|Editor=Kaspersky lab&lt;br /&gt;
|Year=2011&lt;br /&gt;
|ISBN=&lt;br /&gt;
|Page=&lt;br /&gt;
|Abstract=Now, for some much more interesting news. It turned out that the continuing research by the Hungarian lab Crysys has led to the detection of the main missing link – a dropper that performed the initial system infection.&lt;br /&gt;
As we expected, a vulnerability was to blame. An MS Word doc file was detected that was sent to one of the victims by the people behind Duqu. The file contained an exploit for a previously unknown vulnerability in Windows that extracted and launched components of Duqu.&amp;lt;br&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Symantec and Microsoft still haven’t made the actual dropper file available to other antivirus companies yet, nor have they provided information about which Windows component contains the vulnerability that results in privilege escalation. However, indirect evidence suggests that the vulnerability is in win32k.sys.&lt;br /&gt;
|Botnet=Duqu, &lt;br /&gt;
|Malware=Duqu (bot), &lt;br /&gt;
|CCProtocol=, &lt;br /&gt;
|Operation=, &lt;br /&gt;
|Keyword=, &lt;br /&gt;
}}&lt;/div&gt;</summary>
		<author><name>Eric.freyssinet</name></author>
	</entry>
</feed>