Old Backdoor, New Obfuscation, (Sat, Mar 18th)

Web: https://malware.news/t/old-backdoor-new-obfuscation-sat-mar-18th/67979

When you’re hunting, sometimes you feel lucky because you spotted something that looks brand new, but sometimes it’s not new or… the code has been changed to bypass existing detections. Here is a perfect example. A few months ago, Juniper discovered[1] a backdoor targeting VMWare ESXi servers, more precisely, the OpenSLP service (%%cve:2019-5544%% and %%cve:2020-3992%%).

Article Link: https://isc.sans.edu/diary/rss/29646

1 post - 1 participant

Read full topic

backdoor obfuscation old sat