Archive

2010年7月 的Archive

APT Never Dies

2010年7月20日 darkfloyd 尚無評論

Introduction

Inspired with one of the section about Advanced Persistent Threat (APT) and Botnet C&C server from Mr. Yung in Bot2010 2010[1] conference, I and Mars have worked out and tried to search live C&C servers to dig into more details in APT area. APT is defined as a kind of targeted attack against high value information with strong resources and authority supported.

With reference to the Shadow in the Cloud Report[2] published in April, in fact, we have experienced that Google has done some filtering itself, however, we have got some lucks and search out active C&C server successfully.

閱讀全文…

Categories: Malware Research Tags: