6/12/2012

Flame: Replication via Windows Update MITM proxy server - Securelist

Flame: Replication via Windows Update MITM proxy server - Securelist: The Flame malware uses several methods to replicate itself. The most interesting one is the use of the Microsoft Windows Update service. This is implemented in Flame’s “SNACK”, “MUNCH” and “GADGET” modules. Being parts of Flame, these modules are easily reconfigurable. The behavior of these modules is controlled by Flame’s global registry, the database that contains thousands of configuration options.

1 comment :

  1. If you are going for best contents like I do, only go to see
    this site daily as it offers quality contents, thanks
    Also see my site: server

    ReplyDelete