▼
Showing posts with label Linux/Bckdr-RKC. Show all posts
Showing posts with label Linux/Bckdr-RKC. Show all posts

Hutizu/Huituzi - Follow the Gray Rabbit

›
When typing Huituzi (the Chinese phonetic originally found in .ssyslog) into Google Translate, when performing phonetic typing for Chinese, ...

Hutizu and Linux/Bckdr-RKC Detection Statistics

›
Let's take a look at current detection statistics for Linux/Bckdr-RKC. The newer variant has been named the Hutizu backdoor by Antiviru...

Hutizu Under the Hood

›
Been looking at the STRINGS result of .ssyslog... Which is now detected by a small number of AV vendors as "Hutizu" http://code....

Linux/Bckdr-RKC Delivery Method Analyzed

›
You can tell a lot about an attacker based upon their methods of attack. -Automated attacks happen rapidly, with no time for typing -Manua...
2 comments:

Hutizu aka Linux/Bckdr-RKC and Duqu Links? Food for Thought.

›
I can't put my finger on it, but after looking at this article on the mystery of the Duqu Framework , and looking at my publicly posted ...

UPDATED: Hutizu and Linux/Bckdr-RKC now have limited detection

›
UPDATE: The latest news on Linux/Bckdr-RKC (.xsyslog) and Hutizu (.ssyslog) can be viewed HERE , including newest detection statistics.  Th...
2 comments:

Following the Trail: Determining the Origins of Linux/Bckdr-RKC

›
It is already known that the two Linux/Bckdr-RKC variants I have received have both been hosted by 216.83.44.229.  Furthermore, the first va...

Chinese Origins in .ssyslog Decompiled - Linux/Bckdr-RKC and Hutizu

›
 I have partially decompiled the second piece of malware which was similar to the original Linux/Bckdr-RKC dropped on my honeypot. Update ...

Linux/Bckdr-RKC: A New Variant Appears

›
Someone was busy this Christmas. A new variant of Linux/Bckdr-RKC has been placed on my honeypot. Unfortunately detections by Sophos do ...

Linux/Bckdr-RKC Initial Analysis

›
A malicious user dropped off a VERY interesting piece of malware on my honeypot today with the filename ".xsyslog" This piece of...