funsec mailing list archives

Pinch: The Trojan Creator


From: "Paul Ferguson" <fergdawg () netzero net>
Date: Wed, 18 Jul 2007 18:09:35 GMT

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

A very nice write-up on this tool over on the PandaLabs blog...

[snip]

Some time ago, we talked to you about malware prices, HTTP botnets, etc.
Today I will show you the level Trojan creators have reached and the way in
which some of them launch their creation ‘builders’, authentic centers
for designing and creating totally customizable Trojans. And this is where
Pinch comes in.

It is a tool for creating Trojans which allows: defining the actions for
the Trojan to take, packing the executable file to make its detection more
difficult, disabling specific ‘annoying’ services such as those of
antiviruses…

Among the tools for creating viruses, Trojans, etc. this might be the most
commonly used, distributed and sold, given its ease of use due to a very
intuitive interface. This allows malicious attackers to have an executable
ready to infect, steal, spread, etc. in a few minutes. Consequently, it
causes victims serious problems without them even realizing, until it is
too late and they have to face the financial consequences.

[snip]

More:
http://blogs.pandasoftware.com/blogs/pandalabs/archive/2007/07/18/PINCH_2C0
0_-THE-TROJAN-CREATOR.aspx

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.2 (Build 2014)

wj8DBQFGnldbq1pz9mNUZTMRAskZAJ0ekTha0/Js+fsHPpsk2ITQGTkh4gCeJKc/
doJX4+QBhLlkjTtMJvsa7a8=
=zGW2
-----END PGP SIGNATURE-----



--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: