HotPage

In this episode, ESET Distinguished Researcher Aryeh Goretsky and his guest ESET Principal Threat Intelligence Researcher Robert Lipovsky detail recently discovered unusual adware called HotPage. This trojan caught attention of researchers by using a Microsoft-signed, yet vulnerable, kernel driver to inject and manipulate what victims see in their browsers. With its advanced technical means and targeting of Chinese internet cafes and gamers, it shows that even adware creators can invest extra time and effort to innovate their malicious products.

 

Host

Aryeh Goretsky, ESET Distinguished Researcher

Guest:

Robert Lipovsky, ESET Principal Threat Intelligence Researcher

Materials:

HotPage: Story of a signed, vulnerable, ad-injecting driver