Malware Calendar Wallpaper for September 2011

Here’s the latest of our malware calendar wallpapers.

1280×800 | 1680×1050 | 1920×1200 | 2560×1600

This month marks the anniversary of the arrest of the alleged author of the CIH virus (also known as Chernobyl). This virus was designed to erase the flash BIOS of PCs running Windows 9x, making the machine unbootable – something that was particularly nasty on notebooks, where hardware components like flash memory are built into the motherboard. CIH also had another payload – to overwrite the hard disk with garbage.

This virus was responsible for damage to a large number of computers in South Korea in 2000, three years after its first appearance.

Today the threat landscape is dominated by malware-for-profit, in contrast to the cyber-vandalism of the 1990s. However, CIH provides a reminder that even cyber-vandalism could have a serious financial impact on its victims.

Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRabbit in Node.js and PollCat in JavaScript.

Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and threat analysts.

Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing Telegram data and eavesdropping on victims.

Kaspersky researchers reveal previously undocumented malware attributed to Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore): NightLedger backdoor, ArcBridge, and BridgeHead tunneling tools.