Cut the Cutwail

2010-02-01

Kyle Yang

Fortinet, USA

Editor: Helen Martin

Abstract

After playing the cat-and-mouse game with AV companies for several months, the author(s) of Pushdo/Cutwail finally decided to change their advanced installer, in doing so changing the communication mechanism between the servers and bots. Kyle Yang reveals the details of the new protocol.

The full article is available to registered users. Click here for free registration or, if you already are a registered user, login to access the full article.

Magazine


	February 2010 PDF Please register to download the PDF Comment SSL certificate warnings – nuisance or value? News Researchers paid for Chrome bugs Phishing and scams continue to rise Malware prevalence report December 2009 Malware analysis Cut the Cutwail Call for papers Calling all speakers: VB2010 Vancouver Feature Data tainting for malware analysis – part three Tutorial Introduction to advanced memory analysis Comparative review Novell SUSE Linux Enterprise Server 11 Calendar Anti-malware industry events See also Virus Bulletin archives How to become a subscriber Reprints

Quick Links

Poll

The Japanese government is reported to have commissioned a 'defensive virus'. Is 'defensive' malware ever a good idea?
Leave a comment
View 11 comments

VB2012


	VB2012 will take place 26 - 28 September 2012 at the Fairmont Dallas hotel, Dallas, TX, USA.

Virus Bulletin currently has 224,243 registered users.

Fighting malware and spam

Cut the Cutwail

Kyle Yang

PDF

Comment

News

Malware prevalence report

Malware analysis

Call for papers

Feature

Tutorial

Comparative review

Calendar

See also