Michal Krejdl

14 October 2011

Communicative malware writers

Do you remember Mystic compressor and its "shouts" to the world, especially to Sunbelt guys? I hope so, but just in case - here's one screenshot:

And now we've got a kind of response also from Morphex authors :-)

A few of my blog posts concern Morphex, Crum and similar custom packers (this one e.g.) and it is quite possible that Sunzer or Flynt reads our blog from time to time. There's an answer to our question - "Is Morphex a successor of Crum?" - in current (ITW) Morphex version:

Bingo! Now the "genealogy" is confirmed.

Threat Research, Security News