https://www.botnets.fr/index.php?action=history&feed=atom&title=ZeroAccess_rootkit_launched_by_signed_installers 2026-10-23T23:07:03Z Revision history for this page on the wiki MediaWiki 1.43.11 https://www.botnets.fr/index.php?title=ZeroAccess_rootkit_launched_by_signed_installers&diff=5788&oldid=prev 2015-08-05T20:04:58Z

<p>Text replacement - &quot; blogs.mcafee.com&quot; to &quot;&quot;</p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 20:04, 5 August 2015</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l5">Line 5:</td> <td colspan="2" class="diff-lineno">Line 5:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Licence=</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Licence=</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Video=</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Video=</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>|Link=http://blogs.mcafee.com/mcafee-labs/zeroaccess-rootkit-launched-by-signed-installers <del style="font-weight: bold; text-decoration: none;">blogs.mcafee.com</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>|Link=http://blogs.mcafee.com/mcafee-labs/zeroaccess-rootkit-launched-by-signed-installers</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Author=Kevin Beets, Peter Szor,  </div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Author=Kevin Beets, Peter Szor,  </div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|NomRevue=McAfee Labs Blog</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|NomRevue=McAfee Labs Blog</div></td></tr> <!-- diff cache key wiki:diff:1.41:old-1953:rev-5788:php=table --> </table>

Eric.freyssinet https://www.botnets.fr/index.php?title=ZeroAccess_rootkit_launched_by_signed_installers&diff=1953&oldid=prev 2015-02-07T14:23:06Z

<p>1 revision imported</p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 14:23, 7 February 2015</td> </tr><tr><td colspan="4" class="diff-notice" lang="en"><div class="mw-diff-empty">(No difference)</div> </td></tr> <!-- diff cache key wiki:diff:1.41:old-1952:rev-1953 --> </table>

Eric.freyssinet https://www.botnets.fr/index.php?title=ZeroAccess_rootkit_launched_by_signed_installers&diff=1952&oldid=prev 2012-03-07T20:45:36Z

<p></p> <p><b>New page</b></p><div>{{Publication<br /> |Image=zeroaccess1.png<br /> |Legend=<br /> |Document=<br /> |Licence=<br /> |Video=<br /> |Link=http://blogs.mcafee.com/mcafee-labs/zeroaccess-rootkit-launched-by-signed-installers blogs.mcafee.com<br /> |Author=Kevin Beets, Peter Szor, <br /> |NomRevue=McAfee Labs Blog<br /> |Date=21 novembre 2011<br /> |Editor=McAfee<br /> |Year=2011<br /> |ISBN=<br /> |Page=<br /> |Abstract=Digital certificates and certificate authorities have been much in the news recently. Attacks–such as those used by [[Stuxnet]], [[Duqu]], and other malware–involving stolen certificates show an increasingly worrisome new security trend.<br /> Certificate authorities have been targeted several times in the recent past with some success. There is a large chunk of known malware signed by apparently legitimate companies that appear to have authored malware, adware, and/or potentially unwanted programs. As a matter of fact, a very significant percentage of recent malware executables (as high as 5 percent) purport to be, or are, signed with some sort of certificate. Even in the case of mobile malware, signed executables have appeared because issuers have failed to see the malware in the files before approving them. This attention to certificates by malware authors seems to validate that they are indeed the “keys to the kingdom.”<br /> |Botnet=, <br /> |Malware=ZeroAccess, <br /> |CCProtocol=, <br /> |Operation=, <br /> |Keyword=rootkit, certificate, <br /> }}</div>

Eric.freyssinet