Forgot your password?

New Cridex Malware Copies Tactics From GameOver Zeus 18

Posted by samzenpus
from the imitation-is-the-sincerest-form-of-flattery dept.
Trailrunner7 writes The GameOver Zeus malware had a nice run for itself, making untold millions of dollars for its creators. But it was a run that ended with a multi-continent operation from law enforcement and security researchers to disassemble the infrastructure. Now researchers have identified a new variant of the Cridex malware that has adopted some of the techniques that made GOZ so successful in its day.

Researchers at IBM's X-Force research team have seen a new version of Cridex, which is also known as Bugat and Feodo, using some of the same techniques that GOZ used to such good effect. Specifically, the new strain of malware has adopted GOZ's penchant for using HTML injections, and the researchers say the technique is nearly identical to the way that GOZ handled it.

"There are two possible explanations for this. First, someone from the GOZ group could have moved to the Bugat team. This would not be the first time something like this has happened, which we've witnessed in other cases involving Zeus and Citadel; however, it is not very likely in this case since Bugat and GOZ are essentially competitors, while Zeus and Citadel are closely related. The second and more likely explanation is that the Bugat team could have analyzed and perhaps reversed the GOZ malware before copying the HTML injections that made GOZ so highly profitable for its operators," Etay Maor, a senior fraud prevention strategist at IBM, wrote in an analysis of the new malware.

+ - New Mars crater spotted in before-and-after pictures

Submitted by The Bad Astronomer
The Bad Astronomer (563217) writes "The Mars Reconnaissance Orbiter spotted a new crater on the surface of Mars, and, using before-and-after pictures, the impact date has been nailed down to less than a day — it happened on or about March 27, 2012. The crater is 50 meters or so in size, and surrounded by smaller craters that may have been caused by smaller impacts due to the incoming meteoroid breaking up. Several landslides were spotted in the area as well, possibly due to the shock wave of the impact."

+ - Astronomers determine the length of day of an exoplanet

Submitted by The Bad Astronomer
The Bad Astronomer (563217) writes "Astronomers have just announced that the exoplanet Beta Pic b — a 10-Jupiter-mass world 60 light years away -— rotates in about 8 hours. Using a high-resolution spectrometer and exploiting the Doppler shift of light seen as the planet spins, they measured its rotation velocity as 28,000 mph. Making reasonable assumptions about the planet's size, that gives the length of its day. This is the first time such a measurement has been achieved for an exoplanet."

+ - Astronomer discovers nearby brown dwarf literally as cold as ice

Submitted by The Bad Astronomer
The Bad Astronomer (563217) writes "Using data from the orbiting WISE and Spitzer infrared space telescopes, an astronomer has discovered a brown dwarf that is just 7.2 light years away, making it the seventh closest known interstellar object to the Sun. Not only that, it's cold ; its temperature is likely 240-260 Kelvin, well below the freezing point of water. It's literally as cold as ice."

+ - Earth-sized planet discovered in its star's habitable zone

Submitted by The Bad Astronomer
The Bad Astronomer (563217) writes "Astronomers have announced the discovery of Kepler-186f, a very nearly Earth-sized planet in its star's habitable zone. The planet is the fifth in a system of five orbiting a red dwarf star 500 light years away, and is located in the region where liquid water could exist on its surface. It's not know if this planet is Earth-like — that is, with water and air and the potential for life — but it's the closest we've yet seen where one could be like our own planet."

+ - Object seen in skydiver's helmetcam unlikely to be a meteorite 3

Submitted by The Bad Astronomer
The Bad Astronomer (563217) writes "The viral video showing what looked like a meteorite falling past a skydiver made quite a splash, with many people assuming it was true. However, further analysis shows that it's also perfectly consistent with being a small (1-3 cm) rock that fell out of the parachute itself, which is a far more likely explanation."

Comment: Re:Ummm, probably not (Score 1) 142

by The Bad Astronomer (#46664743) Attached to: Skydiver's Helmet Cam Captures a Falling Meteor
That analysis was done here: (it's not in English, but google translate does a decent job). He makes a distance estimate based on speed, which itself is based on the assumption it's a falling rock at terminal velocity. But the distance, speed, and time it takes to cross the FOV are related, and if you make a stab at speed you can get distance and vice versa.

Comment: Re:Ummm, probably not (Score 1) 142

by The Bad Astronomer (#46663953) Attached to: Skydiver's Helmet Cam Captures a Falling Meteor
Yes, the apparent speed is the biggest argument against it being something packed in the 'chute, I'd think. If the skydiver were still decelerating hard after the parachute opened, the rock could appear to move rapidly, but even then it appears to come from farther away than the parachute. I'm still looking into this, and will have my own thoughts posted tomorrow on my blog.

+ - New supernova seen in nearby galaxy M82

Submitted by The Bad Astronomer
The Bad Astronomer (563217) writes "A new and potentially bright supernova was just discovered in the nearby galaxy M82. This is a Type Ia supernova, the catastrophic explosion of a white dwarf. It appears to be on the rise, and may have been caught as much as two weeks before peak brightness. It's currently already brighter than magnitude 12, and may get to mag 8, easy to see in small telescopes. The galaxy is less than 12 million light years away, so this may become one of the best-studied supernovae in recent times. Type Ia supernovae are used to measure dark energy, so seeing one nearby is a huge boon to astronomy."

+ - Exoplanet camera now online

Submitted by The Bad Astronomer
The Bad Astronomer (563217) writes "The Gemini Planet Imager is a camera that is designed to take direct photos of exoplanets, alien worlds orbiting other stars. In a test run last November it spotted the exoplanet Beta Pictoris b, a dusty ring around a nearby star, and even snapped a portrait of Jupiter's moon Europa. Up to now, only about a dozen exoplanets have been directly imaged; GPI is expected to find dozens more in the next few years."

+ - How astronauts took the most important photo in space history

Submitted by The Bad Astronomer
The Bad Astronomer (563217) writes "On December 24, 1968, the Apollo 8 astronauts saw the Earth rising over the limb of the Moon. The photo they took of this moment — dubbed Earthrise —has become an icon of our need to explore, and to protect our home world. NASA has just released a video explaining how the astronauts were able to capture this unique moment, which included a dash of both coincidence and fast teamwork."

Remember the good old days, when CPU was singular?