Nemesis Bootkit — A New Stealthy Payment Card Malware

This Malware – Reappears even after Re-installation of the OS and this has got the ability to modify the legitimate VBR (Volume Boot Record) that makes the malware possible to load before Windows starts.

 

More info on this malware : http://thehackernews.com/2015/12/nemesis-banking-malware.html

Rovnix was the last VBR bootkit I recall.  We do have techniques to capture, detect and remove these infections.  As always though the best option is PREVENTION!!!!  Avoid risky internet behavior, surf safe, avoiding pirating, don't open unknown attachments, etc.  Can't be overemphasized!

Yea Bootkits have been around for quite a while now...just another variant and our MRT will be here to help those who get infected.

• Bootkit: the challenge
• MBR Rootkit, A New Breed of Malware
• What is Whistler Bootkit
• TDL4 rebooted and its hidden partition table
• Olmasco bootkit: next circle of TDL4 evolution