A forum for reverse engineering, OS internals and malware analysis 

Forum for analysis and discussion about malware.
 #16569  by R136a1
 Sun Nov 11, 2012 5:59 pm
Seems like what Bitdefender found and named "Yurn Bootkit" earlier this year is actually a part of FinFisher's spying software (https://citizenlab.org/2012/07/from-bah ... t-exposed/):

Yurn Bootkit (Bitdefender): http://labs.bitdefender.com/2012/03/yur ... tionality/
Win32_Belesak.A (Eset): http://www.virusradar.com/en/Win32_Bele ... escription
Backdoor.Finfish (Symantec): https://www.symantec.com/security_respo ... 99&tabid=2
Trojan-Spy:W32/FinSpy.A (F-Secure): http://www.f-secure.com/v-descs/trojan- ... py_a.shtml
Trojan:Win32/Spinfy.A (Microsoft): http://www.microsoft.com/security/porta ... 2FSpinfy.A