DAGGER

By ESGI Advisor in Malware

DAGGER is a malware infection that exists in graphics and network cards. DAGGER runs on dedicated devices and attacks direct memory access (DMA). The attacks initiated by DAGGER targets host runtime memory using DMA provided to hardware devices. DAGGER attacks 32bit and 64bit Windows and Linux systems and can bypass memory address randomisation. DAGGER contains keylogger funtionalities and is able to update its attack behaviour during runtime via an out-of-band channel. DMA-based attacks launched from peripherals are able to compromise the host without exploiting vulnerabilities present in the operating system running on the host. DAGGER is a highly critical security threat to system security and integrity. Unfortunately, up to now no OS (operating system) utilizes security tools that can detect DMA-based attacks.

File System Details

DAGGER may create the following file(s):
# File Name Detections
1. [system
2. server.exe
3. vscan.exe
4. client.exe
5. manager.exe
6. history.txt
7. daggerreadme.txt
8. bugs.txt
9. package.txt

Registry Details

DAGGER may create the following registry entry or registry entries:
unwinvirusscan
unsysmanagerHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversion
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversion

Trending

Most Viewed

Loading...