Tuesday, October 30, 2007

AntiVirus Products Fail to Find Malware

When I found a malicious script riddled with 0×00 bytes, SANS handler Bojan Zdrnja explained to me that this was an old trick. When rendering an HTML page, Internet Explorer will ignore all zero-bytes (bytes with value zero, 0×00). Malware authors use this to obscure their scripts. But this old trick still packs a punch.

Read the article HERE.

0 Comments:

Post a Comment

<< Home