To hinder the automatic detection of malware samples, it is common for malware authors to add mechanisms that detect whether the malware is being run inside a sandbox. Most malware simply halts execution once it detects that it is running inside a sandbox, but in his VB2014 presentation, James Wyke looked at four malware families (Andromeda, Simda, Vundo and Shylock) that go a step further and employ various kinds of decoy behaviour. https://virusbtn/blog/2015/01_13.xml
Posted on: Wed, 14 Jan 2015 07:34:48 +0000
Trending Topics
Recently Viewed Topics
© 2015