[Victor43]

Hello everyone.

I was hoping anyone could give me advice on how to go about learning the behaviors of the latest rootkit threats ? I would like to learn of their hiding techniques and techniques they use to filter data out to their C&C servers ?

Any advice would be greatly appreciated.

Victor

[EP_X0FF]

There is no such thing as "latest" rootkits. All rootkits ITW are 2005-2006 year technology level. I would recommend start from something really old, like Haxdef, next take Haxdoor, next Rustock, next Sinowal, next TDSS, next ZeroAccess. That is all.

[Victor43]

Thank you EP_X0FF. I will follow your advice and thanks.