Scranos rootkit expands operations from China to the rest of the world

From zdnet.com

source code bytecode

A malware operation previously limited to China’s borders has expanded over the past few months to infect users from all over the world, antivirus firm Bitdefender said in a report published today.

Users who have the bad habit of downloading and installing cracked software applications are at the highest risk.

According to Bitdefender experts, these apps are laced with a relatively new malware strain named Scranos. The most important piece of this malware is a rootkit driver that’s hidden inside the tainted apps and which allows the malware to gain boot persistence and take full control over users’ systems in the early stages of an infection.

Read more…