New Malware Family Highlight: Kuluoz
According to Palo Alto Networks ''Threat Landscape Review'', one particular malware family, Kuluoz (also known as Asprox), stands out as prevalent in the sample data. This single family accounts for 4.9 million malicious sessions recorded during the month of October 2014. It impacted 1,933 companies across 10 industries reviewed . Firewall WildFire identified a total of 268,084 unique samples determined to be Kuluoz, 82.4% of which had not been collected by VirusTotal at the time of analysis. The first version of Asprox appeared in 2007, and it was given its name by researchers who identified that it frequently tried to infect ASP (Active Server Pages) based websites. At the time the malware used command and control infrastructure hosted by the now-defunct McColo Corp ISP. By 2013, the primary components of Asprox had been replaced by a new malware family dubbed Kuluoz. While Asprox was an “all-in-one” malware, Kuluoz uses a modular design, which allows it...