VARINDIA IT MAGAZINE

VARINDIA- INDIA'S FRONTLINE IT MAGAZINE   Kaspersky Lab has announced the discovery of  "Gauss", a new cyber-threat, targeting users in the Middle East. Gauss is a nation-state sponsored cyber-espionage toolkit designed to steal sensitive data. Gauss was discovered during the course of the ongoing effort initiated by the International Telecommunication Union (ITU), following the discovery of Flame. Kaspersky Lab's experts discovered Gauss by identifying commonalities the malicious program share with Flame. These include similar architectural platforms, module structures, code bases and means of communication with command & control (C&C) servers. The new malware was discovered by Kaspersky Lab's experts in June 2012. Its main module was named by the unknown creators after the German mathematician Johann Carl Friedrich Gauss.  Multiple modules of Gauss serve the purpose of collecting information from browsers, which include the history of vi...

VARINDIA- INDIA'S FRONTLINE IT MAGAZINE   The research conducted by Kaspersky Lab experts on the discovery of the Flame malware in May 2012 has revealed that the most complex cyberweapon to date. At the time of its discovery, there was no strong evidence of Flame being developed by the same team that delivered Stuxnet and Duqu. The earliest known version of Stuxnet, contains a special module known as “Resource 207”. In the subsequent 2010 version of Stuxnet, this module was completely removed. The "Resource 207" module is an encrypted DLL file and it contains an executable file that's the size of 351,768 bytes with the name "atmpsvcn.ocx". This particular file, as it is now revealed by Kaspersky Lab's investigation, has a lot in common with the code used in Flame. The list of striking resemblances includes the names of mutually exclusive objects, the algorithm used to decrypt strings, and the similar approaches to file naming. Alexander ...