One of our analysts has found a couple ofthing interesting even though debugging the latest version of Flashback, a Mac trojan that attempts to trick people into believing it s an Adobe Flash Player update. even though comparing the differences between Flashback.A and Flashback.B, he saw this routine: Flashback.B performs a vmcheck . If virtualization is detected, the trojan aborts itself.
See More..
