{"id":66,"date":"2006-07-19T13:21:53","date_gmt":"2006-07-19T18:21:53","guid":{"rendered":"https:\/\/www.zubairalexander.com\/stage\/?p=66"},"modified":"2017-12-18T18:21:47","modified_gmt":"2017-12-19T01:21:47","slug":"rootkits-get-better-at-hiding","status":"publish","type":"post","link":"https:\/\/www.zubairalexander.com\/blog\/rootkits-get-better-at-hiding\/","title":{"rendered":"Rootkits Get Better at Hiding"},"content":{"rendered":"<p>A new Trojan horse is so good at hiding itself that some security researchers claim a new chapter has begun in their battle against malicious-code authors. The new pest, dubbed &#8220;Rustock&#8221; by Symantec and &#8220;Mailbot.AZ&#8221; by F-Secure, uses &#8220;rootkit&#8221; techniques crafted to avoid the detection technology used by security software.<\/p>\n<p>Rootkits are considered an emerging threat. They are used to make system changes to hide software, which may be malicious. In the case of Rustock or Mailbot.AZ, rootkit technology was used to hide a Trojan horse that opens a backdoor on an infected system, putting it at the beck and call of an attacker, according to Symantec.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A new Trojan horse is so good at hiding itself that some security researchers claim a new chapter has begun in their battle against malicious-code authors. The new pest, dubbed &#8220;Rustock&#8221; by Symantec and &#8220;Mailbot.AZ&#8221; by F-Secure, uses &#8220;rootkit&#8221; techniques crafted to avoid the detection technology used by security software. Rootkits are considered an emerging [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[7,24],"tags":[],"class_list":["post-66","post","type-post","status-publish","format-standard","hentry","category-news","category-security"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.8 - aioseo.com -->\n\t<meta name=\"description\" content=\"A new Trojan horse is so good at hiding itself that some security researchers claim a new chapter has begun in their battle against malicious-code authors. The new pest, dubbed &quot;Rustock&quot; by Symantec and &quot;Mailbot.AZ&quot; by F-Secure, uses &quot;rootkit&quot; techniques crafted to avoid the detection technology used by security software. Rootkits are considered an emerging\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Zubair Alexander\"\/>\n\t<meta name=\"google-site-verification\" content=\"xUGSODobCBguuxTNOCWOCVwAIhfY39LLtYAQOmExYzw\" \/>\n\t<meta name=\"msvalidate.01\" content=\"65829CD0C3C810D64E58EA860413DB21\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/www.zubairalexander.com\/blog\/rootkits-get-better-at-hiding\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.8\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Alexander&#039;s Blog | Sharing knowledge with the global IT community since November 1, 2004\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Rootkits Get Better at Hiding | Alexander&#039;s Blog\" \/>\n\t\t<meta property=\"og:description\" content=\"A new Trojan horse is so good at hiding itself that some security researchers claim a new chapter has begun in their battle against malicious-code authors. The new pest, dubbed &quot;Rustock&quot; by Symantec and &quot;Mailbot.AZ&quot; by F-Secure, uses &quot;rootkit&quot; techniques crafted to avoid the detection technology used by security software. Rootkits are considered an emerging\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/www.zubairalexander.com\/blog\/rootkits-get-better-at-hiding\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2004\/11\/AlexandersBlog_logo_590x590.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2004\/11\/AlexandersBlog_logo_590x590.png\" \/>\n\t\t<meta property=\"og:image:width\" content=\"590\" \/>\n\t\t<meta property=\"og:image:height\" content=\"590\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2006-07-19T18:21:53+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2017-12-19T01:21:47+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@zubairalexander\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Rootkits Get Better at Hiding | Alexander&#039;s Blog\" \/>\n\t\t<meta name=\"twitter:description\" content=\"A new Trojan horse is so good at hiding itself that some security researchers claim a new chapter has begun in their battle against malicious-code authors. The new pest, dubbed &quot;Rustock&quot; by Symantec and &quot;Mailbot.AZ&quot; by F-Secure, uses &quot;rootkit&quot; techniques crafted to avoid the detection technology used by security software. Rootkits are considered an emerging\" \/>\n\t\t<meta name=\"twitter:creator\" content=\"@zubairalexander\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2004\/11\/AlexandersBlog_logo_590x590.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/rootkits-get-better-at-hiding\\\/#article\",\"name\":\"Rootkits Get Better at Hiding | Alexander's Blog\",\"headline\":\"Rootkits Get Better at Hiding\",\"author\":{\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/author\\\/sp_admin\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/10\\\/AlexandersBlog_logo_590x590.jpg\",\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/#articleImage\"},\"datePublished\":\"2006-07-19T13:21:53-07:00\",\"dateModified\":\"2017-12-18T18:21:47-08:00\",\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/rootkits-get-better-at-hiding\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/rootkits-get-better-at-hiding\\\/#webpage\"},\"articleSection\":\"News, Security\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/rootkits-get-better-at-hiding\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/category\\\/news\\\/#listItem\",\"name\":\"News\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/category\\\/news\\\/#listItem\",\"position\":2,\"name\":\"News\",\"item\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/category\\\/news\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/rootkits-get-better-at-hiding\\\/#listItem\",\"name\":\"Rootkits Get Better at Hiding\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/rootkits-get-better-at-hiding\\\/#listItem\",\"position\":3,\"name\":\"Rootkits Get Better at Hiding\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/category\\\/news\\\/#listItem\",\"name\":\"News\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/#organization\",\"name\":\"Alexander's Blog\",\"description\":\"Sharing knowledge with the global IT community since November 1, 2004\",\"url\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/10\\\/AlexandersBlog_logo_590x590.jpg\",\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/rootkits-get-better-at-hiding\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/rootkits-get-better-at-hiding\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/twitter.com\\\/zubairalexander\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/zubairalexander\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/author\\\/sp_admin\\\/#author\",\"url\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/author\\\/sp_admin\\\/\",\"name\":\"Zubair Alexander\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/rootkits-get-better-at-hiding\\\/#webpage\",\"url\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/rootkits-get-better-at-hiding\\\/\",\"name\":\"Rootkits Get Better at Hiding | Alexander's Blog\",\"description\":\"A new Trojan horse is so good at hiding itself that some security researchers claim a new chapter has begun in their battle against malicious-code authors. The new pest, dubbed \\\"Rustock\\\" by Symantec and \\\"Mailbot.AZ\\\" by F-Secure, uses \\\"rootkit\\\" techniques crafted to avoid the detection technology used by security software. Rootkits are considered an emerging\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/rootkits-get-better-at-hiding\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/author\\\/sp_admin\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/author\\\/sp_admin\\\/#author\"},\"datePublished\":\"2006-07-19T13:21:53-07:00\",\"dateModified\":\"2017-12-18T18:21:47-08:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/\",\"name\":\"Alexander's Blog\",\"description\":\"Sharing knowledge with the global IT community since November 1, 2004\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.zubairalexander.com\\\/blog\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Rootkits Get Better at Hiding | Alexander's Blog","description":"A new Trojan horse is so good at hiding itself that some security researchers claim a new chapter has begun in their battle against malicious-code authors. The new pest, dubbed \"Rustock\" by Symantec and \"Mailbot.AZ\" by F-Secure, uses \"rootkit\" techniques crafted to avoid the detection technology used by security software. Rootkits are considered an emerging","canonical_url":"https:\/\/www.zubairalexander.com\/blog\/rootkits-get-better-at-hiding\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"google-site-verification":"xUGSODobCBguuxTNOCWOCVwAIhfY39LLtYAQOmExYzw","msvalidate.01":"65829CD0C3C810D64E58EA860413DB21","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.zubairalexander.com\/blog\/rootkits-get-better-at-hiding\/#article","name":"Rootkits Get Better at Hiding | Alexander's Blog","headline":"Rootkits Get Better at Hiding","author":{"@id":"https:\/\/www.zubairalexander.com\/blog\/author\/sp_admin\/#author"},"publisher":{"@id":"https:\/\/www.zubairalexander.com\/blog\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2020\/10\/AlexandersBlog_logo_590x590.jpg","@id":"https:\/\/www.zubairalexander.com\/blog\/#articleImage"},"datePublished":"2006-07-19T13:21:53-07:00","dateModified":"2017-12-18T18:21:47-08:00","inLanguage":"en-US","mainEntityOfPage":{"@id":"https:\/\/www.zubairalexander.com\/blog\/rootkits-get-better-at-hiding\/#webpage"},"isPartOf":{"@id":"https:\/\/www.zubairalexander.com\/blog\/rootkits-get-better-at-hiding\/#webpage"},"articleSection":"News, Security"},{"@type":"BreadcrumbList","@id":"https:\/\/www.zubairalexander.com\/blog\/rootkits-get-better-at-hiding\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/www.zubairalexander.com\/blog#listItem","position":1,"name":"Home","item":"https:\/\/www.zubairalexander.com\/blog","nextItem":{"@type":"ListItem","@id":"https:\/\/www.zubairalexander.com\/blog\/category\/news\/#listItem","name":"News"}},{"@type":"ListItem","@id":"https:\/\/www.zubairalexander.com\/blog\/category\/news\/#listItem","position":2,"name":"News","item":"https:\/\/www.zubairalexander.com\/blog\/category\/news\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.zubairalexander.com\/blog\/rootkits-get-better-at-hiding\/#listItem","name":"Rootkits Get Better at Hiding"},"previousItem":{"@type":"ListItem","@id":"https:\/\/www.zubairalexander.com\/blog#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/www.zubairalexander.com\/blog\/rootkits-get-better-at-hiding\/#listItem","position":3,"name":"Rootkits Get Better at Hiding","previousItem":{"@type":"ListItem","@id":"https:\/\/www.zubairalexander.com\/blog\/category\/news\/#listItem","name":"News"}}]},{"@type":"Organization","@id":"https:\/\/www.zubairalexander.com\/blog\/#organization","name":"Alexander's Blog","description":"Sharing knowledge with the global IT community since November 1, 2004","url":"https:\/\/www.zubairalexander.com\/blog\/","logo":{"@type":"ImageObject","url":"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2020\/10\/AlexandersBlog_logo_590x590.jpg","@id":"https:\/\/www.zubairalexander.com\/blog\/rootkits-get-better-at-hiding\/#organizationLogo"},"image":{"@id":"https:\/\/www.zubairalexander.com\/blog\/rootkits-get-better-at-hiding\/#organizationLogo"},"sameAs":["https:\/\/twitter.com\/zubairalexander","https:\/\/www.linkedin.com\/in\/zubairalexander"]},{"@type":"Person","@id":"https:\/\/www.zubairalexander.com\/blog\/author\/sp_admin\/#author","url":"https:\/\/www.zubairalexander.com\/blog\/author\/sp_admin\/","name":"Zubair Alexander"},{"@type":"WebPage","@id":"https:\/\/www.zubairalexander.com\/blog\/rootkits-get-better-at-hiding\/#webpage","url":"https:\/\/www.zubairalexander.com\/blog\/rootkits-get-better-at-hiding\/","name":"Rootkits Get Better at Hiding | Alexander's Blog","description":"A new Trojan horse is so good at hiding itself that some security researchers claim a new chapter has begun in their battle against malicious-code authors. The new pest, dubbed \"Rustock\" by Symantec and \"Mailbot.AZ\" by F-Secure, uses \"rootkit\" techniques crafted to avoid the detection technology used by security software. Rootkits are considered an emerging","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/www.zubairalexander.com\/blog\/#website"},"breadcrumb":{"@id":"https:\/\/www.zubairalexander.com\/blog\/rootkits-get-better-at-hiding\/#breadcrumblist"},"author":{"@id":"https:\/\/www.zubairalexander.com\/blog\/author\/sp_admin\/#author"},"creator":{"@id":"https:\/\/www.zubairalexander.com\/blog\/author\/sp_admin\/#author"},"datePublished":"2006-07-19T13:21:53-07:00","dateModified":"2017-12-18T18:21:47-08:00"},{"@type":"WebSite","@id":"https:\/\/www.zubairalexander.com\/blog\/#website","url":"https:\/\/www.zubairalexander.com\/blog\/","name":"Alexander's Blog","description":"Sharing knowledge with the global IT community since November 1, 2004","inLanguage":"en-US","publisher":{"@id":"https:\/\/www.zubairalexander.com\/blog\/#organization"}}]},"og:locale":"en_US","og:site_name":"Alexander's Blog | Sharing knowledge with the global IT community since November 1, 2004","og:type":"article","og:title":"Rootkits Get Better at Hiding | Alexander's Blog","og:description":"A new Trojan horse is so good at hiding itself that some security researchers claim a new chapter has begun in their battle against malicious-code authors. The new pest, dubbed &quot;Rustock&quot; by Symantec and &quot;Mailbot.AZ&quot; by F-Secure, uses &quot;rootkit&quot; techniques crafted to avoid the detection technology used by security software. Rootkits are considered an emerging","og:url":"https:\/\/www.zubairalexander.com\/blog\/rootkits-get-better-at-hiding\/","og:image":"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2004\/11\/AlexandersBlog_logo_590x590.png","og:image:secure_url":"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2004\/11\/AlexandersBlog_logo_590x590.png","og:image:width":590,"og:image:height":590,"article:published_time":"2006-07-19T18:21:53+00:00","article:modified_time":"2017-12-19T01:21:47+00:00","twitter:card":"summary_large_image","twitter:site":"@zubairalexander","twitter:title":"Rootkits Get Better at Hiding | Alexander's Blog","twitter:description":"A new Trojan horse is so good at hiding itself that some security researchers claim a new chapter has begun in their battle against malicious-code authors. The new pest, dubbed &quot;Rustock&quot; by Symantec and &quot;Mailbot.AZ&quot; by F-Secure, uses &quot;rootkit&quot; techniques crafted to avoid the detection technology used by security software. Rootkits are considered an emerging","twitter:creator":"@zubairalexander","twitter:image":"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2004\/11\/AlexandersBlog_logo_590x590.png"},"aioseo_meta_data":{"post_id":"66","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"location":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2020-12-21 04:03:07","updated":"2025-06-04 00:19:41","seo_analyzer_scan_date":null},"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/posts\/66","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/comments?post=66"}],"version-history":[{"count":0,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/posts\/66\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/media?parent=66"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/categories?post=66"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/tags?post=66"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}