"Poweliks" Malware Uses Windows Registry to Avoid Detection

[JAMESWT]

Very good analysis
http://blog.trendmicro.com/trendlabs-security-intelligence/poweliks-malware-hides-in-windows-registry/


https://blog.gdatasoftware.com/blog/article/poweliks-the-persistent-malware-without-a-file.html

 

[Nikos751]

Also, check this out
http://malware.dontneedcoffee.com/2014/07/from-alureonwowliks-to-poweliks-botnet.html

 

[JAMESWT]

Thanks

 

[Aura]

This is old as hell news.
What were you guys doooooing back then when it was released ! Lol.

 

[Cowpipe]

This is old as hell news.
What were you guys doooooing back then when it was released ! Lol.

To be honest, my first thought when I read about Poweliks was, yeah, what's new about this? Sometimes I think the antivirus industry is guilty of hyping up it's finds specifically with the intention of worrying users and selling more products.

 

[Aura]

To be honest, my first thought when I read about Poweliks was, yeah, what's new about this? Sometimes I think the antivirus industry is guilty of hyping up it's finds specifically with the intention of worrying users and selling more products.

No I mean, that malware brand (behavior) is quite new, the news of Poweliks isn't, haha !

 

[Cowpipe]

No I mean, that malware brand (behavior) is quite new, the news of Poweliks isn't, haha !

Well the behaviour of Poweliks is actually just a reworking of an age old concept although of course, it hadn't been seen in this form in the wild before. But yes I agree with you, Poweliks has been around for a long time before this post, it's old news, but it's still news for some people here