full-disclosure - Re: Keylogger

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <010701c70707$607b3040$0301a8c0@intuwares.com>
Date: Mon, 13 Nov 2006 09:37:46 -0000
From: "Colin Copley" <colin.75@...nternet.com>
To: "0 0" <0192a0339@...glemail.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Keylogger

0_0 wrote:

-> Undetectable by ALL antivirus products in use today.

You don't mention if it stealths itself from the OS, or which ones are supported ?

I think AV customers would expect their vendors just to pay the ten dollars and be done with it, however they probably wouldn't want to support malware authors I guess.  So it might stick on someone's firewall, or a call to tech support about the error msg and an inquisitive IT admin might submit it.  Perhaps the hourly beacon might attract attention.  
I'm sure most of this list could code something similar / better but, assuming it wasn't mass mailed around, it might be interesting to see how long before AV's are detecting it, if at all.

Rgds
Colin
Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/