Rook Security releases detection tool for Hacking Team malware

[MustISO]

Haven't tried it, curious if anyone else has.

http://betanews.com/2015/07/21/chec...-malware-with-these-essential-security-tools/

https://www.rooksecurity.com/resources/downloads/

 

[seepy83]

There's some value in this. If it detects something, you can be pretty confident that your system is compromised. But a clean scan with this utility doesn't necessarily indicate that a system was not breached by some of the malware that HackingTeam was selling.

This utility's detection is all based on looking at the hashes of exe's and dll's...but things can be done, very easily, to change the hash of an exe or dll without affecting its function (or the vulnerability that it exploits).

 

[John Connor]

Well that was fast. Will add to the malware scan folder along with detekt.

 

[Elixer]

And what makes you think you can trust these guys? It could be malware as well... :ninja:

 

[John Connor]

It was! My computer said "Die John Connor!"

What's the difference between package 1 and package 1.0.1?