Tag Archives: drive-by-download

Win32/64:Blackbeard & Pigeon: Stealthiness techniques in 64-bit Windows, Part 2

Last week we promised to explain in detail how the “Blackbeard” Trojan infiltrates and hide itself in a victim’s system, especially on its 64-bit variant. Everything described in this blogpost happens just before Pigeon (clickbot payload) gets downloaded and executed. The most interesting aspects are the way it bypasses the Windows’ User Access Control (UAC) […]