Tuesday, May 18, 2010

New and improved Zueskit payload from spam messages

Be very careful of this one. It appears that there is limited detection for these variants.

"for instructions and an executable that is meant to be the patch to apply. The executable file named adbp932b.exe (SHA1 0632f562c6c89903b56da235af237dc4b72efeb3) has minimal coverage of about 7%."