Mebroot
Encyclopedia
Mebroot is an MBR
based rootkit
used by some botnets including Torpig
.
Master boot record
A master boot record is a type of boot sector popularized by the IBM Personal Computer. It consists of a sequence of 512 bytes located at the first sector of a data storage device such as a hard disk...
based rootkit
Rootkit
A rootkit is software that enables continued privileged access to a computer while actively hiding its presence from administrators by subverting standard operating system functionality or other applications...
used by some botnets including Torpig
Torpig
Torpig, also known as Sinowal or Anserin , is a type of botnet spread by a variety of trojan horses which can affect computers that use Microsoft Windows...
.
External links
- Taking over the Torpig botnet, UCSB, April 2009
- MBR Rootkit, A New Breed of Malware F-Secure Weblog, March 2008
- From Gromozon to Mebroot - A Reflection on Rootkits Today, Prevx blog, April 2009
- Stealth MBR rootkit by GMER, January 2008