Main Area and Open Discussion > Living Room

Bizarre old-school spyware attacks governments, sports Mark of the Beast

<< < (2/2)

Deozaan:
MiniDuke, as researchers from Kaspersky Lab and Hungary-based CrySyS Lab have dubbed the threat,
--- End quote ---

Shouldn't that be... "MiniDuke; as researchers..."?
-Stephen66515 (February 27, 2013, 05:17 PM)
--- End quote ---

Nope.

A semicolon is used to connect two related (but independently complete) sentences, e.g., "At the mall I bought four things; my sister bought only two things."

Renegade:
"At the mall I bought four things; my sister bought only two things."
-Deozaan (February 28, 2013, 02:10 AM)
--- End quote ---

Which leaves me wondering if she just stole all the other stuff. :P

f0dder:
The first thing that hit my min when I saw the topic of this post: "Oh, Renegade, you!" 8)

As for grammar'nstuff: "Unidentified attackers have infected government agencies and organizations in 23 countries with highly advanced malware that uses low-level code to stay hidden and Twitter and Google to ensure it always has a way to receive updates." might not be elegant, but I didn't find any problem parsing it: it uses low-level code to stay hidden, and it parses tweets and g+whatevers as a C&C channel - in a very inelegant and obvious way, it seems - why don't they stega-hide the info on sites with pictures of lolcats? It's 10+ years since I had that idea, and it can't really be a very unique idea, IMHO.

Yeah, it does say the updates themselves are stagenographically hidden in images (I wonder if it's real stega or just plain old EXIF or unused GIF blocks or whatever), but the content of the tweet in the picture has obvious payload.

Queued Kaspersky and CrySys reports for later. I snickered a bit at the Ars article - "Then there's the multilayered technical agility of the malware, including its ability to dynamically scan all functions from memory instead of importing them." - as if any of that is rocket science or requires much skill to do :)

Navigation

[0] Message Index

[*] Previous page