Cybernews

Chinese state hackers plant malware inside Windows

The Chinese-linked group Mustang Panda used a kernel-level rootkit to deploy undetectable TONESHELL malware, targeting ...

Chinese state hackers use rootkit to hide ToneShell malware activity

A new sample of the ToneShell backdoor, typically seen in Chinese cyberespionage campaigns, has been delivered through a kernel-mode loader in attacks against government organizations.
The Hacker News

Mustang Panda Uses Signed Kernel-Mode Rootkit to Load TONESHELL Backdoor

Mustang Panda deployed TONESHELL via a signed kernel-mode rootkit, targeting Asian government networks and evading security ...
techtimes

Microsoft Confirms Rootkit Malware to Be Allowed on Windows After Signing It Off, Is it Gone Now?

Microsoft has confirmed that it has signed off on the recently discovered "rootkit malware" found on the Windows platform, which is believed to be a potential point of access for threat actors. The ...
Threat Post

Microsoft Signs Malware That Spreads Through Gaming

The driver, called “Netfilter,” is a rootkit that talks to Chinese C2 IPs and aims to spoof gamers’ geo-locations to cheat the system and play from anywhere, Microsoft said. Microsoft signed a driver ...
CRN

Researchers Discover Rootkit Variation

When combined with Web threats, the new rootkit is proving to be both a destructive and prolific combination, security experts say. The rootkit models a similar virus from several years ago but with ...
Threat Post

Purple Fox Rootkit Dropped by Malicious Telegram Installers

Multiple malicious installers were delivering the same Purple Fox rootkit version using the same attack chain, possibly distributed via email or phishing sites. A malicious Telegram instant-messaging ...
CRN

Rootkits To Mask Most Malware By 2008

In the opening quarter of 2006, said McAfee in the first of a trilogy of reports on rootkits, its Avert Labs spotted more rootkit components in worms, Trojan horses, and spyware than in all of 2005.
Network World

Malware and rootkits team up for mayhem

Home alone after school one day, Tommy scans through the latest blogs and teen Web sites, stopping for a chat or two. Somewhere along the way, the computer’s browser hits a site that instantly and ...
PC World

Hacking Team’s malware uses a UEFI rootkit to survive operating system reinstalls

Surveillance software maker Hacking Team has provided its government customers with the ability to infect the low-level firmware found in laptops and other computers that they wanted to spy on. The ...
TechCrunch

Scranos, a new rootkit malware, steals passwords and pushes YouTube clicks

Security researchers have discovered an unusual new malware that steals user passwords and account payment methods stored in a victim’s browser — and also silently pushes up YouTube subscribers and ...