Researcher offers tool to hide malware in .Net

摘要

A computer security researcher has released an upgraded tool that can simplify the placement of difficult-to-detect malicious software in Microsoft's .Net framework on Windows computers. The tool, called .Net-Sploit 1.0, allows a hacker to modify the .Net framework on targeted machines, inserting rootkit-style malicious software in a place untouched by security software and where few security people would think to look, said Erez Metula, the software security engineer for 2BSecure who wrote the tool. In addition, .Net-Sploit automates some of the arduous coding tasks necessary to corrupt the framework, speeding up development of an attack."You'll be amazed at how easy it is to devise an attack," Metula said during a presentation last week at the Black Hat security conference in Amsterdam.