Hackers are developing new software that will help hide browser attack code from some types of security software.
The software, called eVade o' Matic Module (VoMM), uses a variety of techniques to mix up known exploit code so as to make it unrecognizable to some types of antivirus software.
Using these techniques, VoMM "can create an endless number of variants of an exploit," said Aviv Raff, one of the developers behind the project.
"It aims to provide several techniques out of the box to make browser exploits (mostly) undetectable," according to a blog posting by one of the project's founders, a hacker going by the name of "LMH."
Delivered Via Web Site
The software users server-side scripting technology to create new versions of the exploit code, which then get delivered to browser users when they visit the attacker's Web site. By making a number of cosmetic changes to the code that do not affect its functionality, VoMM creates a new version of the malicious software that cannot be detected by "signature-based" techniques.
Signature-based antivirus products analyze known malware and then create a digital fingerprint that allows the antivirus software to identify malicious code. By adding extra components--tabs and spaces, and random comments and variable names--that are not included in known signatures, VOMM creates software that can evade detection.
The VoMM code is expected to be included in a new module for the upcoming 3.0 version of the widely-used Metasploit hacking toolkit, Raff said. Metasploit developer HD Moore is also developing the VoMM software. Raff describes the project in his blog posting.
.- Sponsored Resource:Are you ready for virtualization? Try the sever assessment tool.
- Sponsored Resource:Stay at home servers. Learn more about a home server for your family.
- Sponsored Resource:Get the communications, data, and security a business needs in one neat package. Learn more.
- Sponsored Resource:Learn more about ultra light notebooks from Asus and the best warranty in the industry.
- Sponsored Resource:Thinking about a new Laptop? Lenovo has models to meet everyone's needs.
- Sponsored Resource:Get the truth about remanufactured ink. Learn more from HP.
- Sponsored Resource:Six smart ways to grow small business IT
News For Your Business
- E-mail List Vendor: Our Records Are Accurate
- Fugitive Spam King Dead in Apparent Murder-suicide
- Buying an E-mail List? Marketing Company Says Never Again
- Study Paints Open-Source Software as a Security Risk
- Laptop Security: Keep the Bad Guys at Bay
Community Comments