CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Blue Pill

 
Post new topic   Reply to topic       All -> FavForums -> Rootkit Revelations [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
Ikeb

Special Response Team
Forums Admin

Joined: Apr 20, 2003
Posts: 16535

Forums Admin Moderators MVP Premium SRT Team CC Committee Team F@H

PostPosted: Thu Sep 21, 2006 6:20 pm    Post subject: Blue Pill
Reply with quote

No, not the birth control pill.

'Blue Pill' Prototype Creates 100% Undetectable Malware

Quote:
Joanna Rutkowska, a stealth malware researcher at Singapore-based IT security firm COSEINC, says the new Blue Pill concept uses AMD's SVM/Pacifica virtualization technology to create an ultra-thin hypervisor that takes complete control of the underlying operating system.


... and later ...

Quote:
"The idea behind Blue Pill is simple: your operating system swallows the Blue Pill and it awakes inside the Matrix controlled by the ultra thin Blue Pill hypervisor. This all happens on-the-fly (i.e. without restarting the system) and there is no performance penalty and all the devices," she explained.


Shocked

This mentions only AMD technology, whom I trust is working on some sort of hardware detection mechanism. Sad

Back to top
View users profile Send private message
Ikeb

Special Response Team
Forums Admin

Joined: Apr 20, 2003
Posts: 16535

Forums Admin Moderators MVP Premium SRT Team CC Committee Team F@H

PostPosted: Thu Sep 21, 2006 6:39 pm    Post subject:
Reply with quote

A little more background ... also suggesting that the pill might not take so easy ....

http://searchsecurity.techtarget.com/columnItem/0,294698,sid14_gci1197021,00.html

Back to top
View users profile Send private message
ErikAlbert
Warnings : 3

Captain
Captain


Joined: Jan 20, 2005
Posts: 424


PostPosted: Wed Sep 27, 2006 5:40 pm    Post subject:
Reply with quote

Kind of old news don't you think?

Back to top
View users profile Send private message
Ikeb

Special Response Team
Forums Admin

Joined: Apr 20, 2003
Posts: 16535

Forums Admin Moderators MVP Premium SRT Team CC Committee Team F@H

PostPosted: Thu Sep 28, 2006 3:44 am    Post subject:
Reply with quote

Confused It was news to me. Smile

Back to top
View users profile Send private message
Prince_Serendip

Site Moderator


Joined: Sep 07, 2002
Posts: 17542

1st Responders MIRT Moderators MVP Premium RootKit Detection Hosts Rootkit Experts Rootkit Responders

PostPosted: Thu Sep 28, 2006 2:58 pm    Post subject:
Reply with quote

And, to me. Old news is good news. History can teach you lot, maybe even help you attain wisdom.

I gotta have a look at that algorithm. I've had a theory (actually more of a hypothesis) that using VM with fractal calculations could make a wicked combination.

Computers are all math, at root (pun intended). Wink


_________________
image
Microsoft MVP Consumer Security 2006, 2007 & 2008
Back to top
View users profile Send private message
Elrond

1st Responder Mentor
Premium Member

Joined: Feb 20, 2005
Posts: 1202

1st Responder Mentors 1st Responders MVP Premium Rootkit Experts

PostPosted: Fri Sep 29, 2006 1:58 am    Post subject:
Reply with quote

Since then she supossedly has developed a further version. The original Blue Pill seems to have been very limited in the possibilities to install it.


_________________
Clean and Infected File Sharing Programs
Stand up and be counted
Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Rootkit Revelations All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer