So we’ve progressed now from having just a Registry key entry, to having an executable, to having a randomly-named executable, to having an executable which is shuffled around a little bit on each machine, to one that’s encrypted– really more just obfuscated– to an executable that doesn’t even run as an executable. It runs merely as a series of threads. Now, those threads can communicate with one another, they would check to make sure that the BHO was there and up, and that the whatever other software we had was also up.

Full Story: Philosecurity

Related External Links

• Generated by LinkCurl
• Schneier on Security: Interview with an Adware Developer
• Jeremy Duffy – Awareness Advocate » Interview With an Adware Developer
• Windows 2008 Security – Interview with an Adware Developer

No related posts.