Hunting for A New Stealthy Universal Rootkit Loader

In this entry, we discuss the findings of our investigation into a piece of a signed rootkit, whose main binary functions as a universal loader that enables attackers to directly load a second-stage unsigned kernel module.

attackers binary discuss entry findings functions hunting investigation kernel loader main piece rootkit stage trend micro research : cyber threats trend micro research : latest news trend micro research : malware trend micro research : research