Mustang Panda Upgrades CoolClient With a Kernel Rootkit
Mustang Panda 使用签名的内核驱动程序升级了 CoolClient，该驱动程序隐藏了进程、文件和网络活动，使后门更难检测。 HoneyMyte, also known as Mustang Panda, has pushed its CoolClient backdoor another step deeper into Windows.卡巴斯基的最新分析显示了一种新变体，可以将签名的内核模式驱动程序部署为 Windows [...]
