Receive a suspicious file last week and did a simple behaviour analysis. It is a fake antivirus program that will claim to "scan" and "detect" several virus in your system. It will trick the user to purchase the full license by having various spyware and virus pop ups.
Major AV vendor such as McAfee, Symantec, TrendMicro were not able to detect it.
For more details on my findings, visit W01f Labs - Malware Analysis: Antivirus System PRO
No comments:
Post a Comment