Fancy Bear's a Lumberjack and It's Okay - A Dive into the Kernel Component of Drovorub

This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.

What’s In A Name? Back in August, the NSA and FBI jointly issued a Cybersecurity Advisory on a previously undisclosed piece of malware developed by the Russian GRU called “Drovorub” - a name that comes from the Russian words “дрово” and “руб”, which together translate to “woodcutter” or, as I’m taking it, “lumberjack”. What…

Read on /posts/linux_rootkits_10/ ↗