View source for Olmasco bootkit: next circle of TDL4 evolution (or not)

{{Publication
|Link=http://blog.eset.com/2012/10/18/olmasco-bootkit-next-circle-of-tdl4-evolution-or-not blog.eset.com
|Author=Aleksandr Matrosov
|NomRevue=ESET Threat Blog
|Date=2012-10-18
|Editor=Eset
|Year=2012
|Botnet=TDSS, TDL-4
|Malware=Olmasco
|Abstract=Olmasco (also known as SST, MaxSS)  is a modification of the TDL4 bootkit family that we’ve been aware of since summer 2011. We started to track a new wave of activity from a new Olmasco dropper at the end of this summer. This bootkit family was the second to use VBR (Volume Boot Record) infection to bypass kernel-mode code signing policy since Rovnix (Rovnix bootkit framework updated) appeared in-the-wild.
}}