SALITY

Recommendations

Info

Conclusion • Simple file infector + rootkit + mass = success • Didn’t get much attention • Probably the oldest still actively maintained Trojan? 2015 LookingGlass Cyber Solutions Inc.
Thanks for attending the presentation! Questions? For any information please contact: virustracker@lgscout.com © 2015 LookingGlass Cyber Solutions 2015 LookingGlass Cyber Solutions Inc.
Page 1 and 2: SALITY 2003 - TODAY. PRESENTER: Pet
Page 3 and 4: Timeline 2003 First appearance [1]
Page 5 and 6: 2015 LookingGlass Cyber Solutions I
Page 7 and 8: Author of Sality? In those old emai
Page 9 and 10: Statistics Up to 2 million per day
Page 11 and 12: Statistics The reasons mostly 3 rd
Page 13 and 14: Link between ddos attacks and Salit
Page 15 and 16: • Only active botnets are #3 and
Page 17 and 18: Network #3 Sample Injects into a ra
Page 19 and 20: P2P Algorithm • Reinventing the T
Page 21 and 22: URL Packs • Examples (they always
Page 23 and 24: URL Packs • Network 4 has many in
Page 25 and 26: URLs in the URL Packs • Every URL
Page 27 and 28: Rootkit Simple (5 KB) but effective
Page 29 and 30: 2015 LookingGlass Cyber Solutions I
Page 31 and 32: How to remove on a single machine 1
Page 33: LIVE DEMO P2P Crawler 2015 LookingG

SALITY

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?