I have already written about Keyloggers in my previous articles. I have mentioned about antiviruses detecting keyloggers as Viruses and hence, hacker has to use Crypters to avoid antivirus detection for keyloggers.
What is Crypter?
Generally, antivirus work by splitting source code of application and then search for certain string within source code. If antivirus detects any certain malicious strings, it either stops scan or deletes the file as virus from system. A crypter is a program that allow users to crypt the source code of their program. Thus Crypter is free software used to hide viruses, keyloggers or any RAT tool from antiviruses so that they are not detected and deleted by antiviruses.
What does Crypter do?
Crypter simply assigns hidden values to each individual code within source code. Thus, the source code becomes hidden. Hence, our sent crypted trojan and virus bypass antivirus detection and our purpose of hacking them is fulfilled without any AV hindrance. Not only does this crypter hide source code, it will unpack the encryption once the program is executed.
What is FUD?
FUD: Fully UnDetectable. With increased use of Crypters to bypass antiviruses, Anti-Virus became more advanced and started including crypter definitions to even detect crypter strings within code. So, use of crypter to hide keylogger and RATs became more complicated as nowadays, no publicly available crypter is FUD.
No comments:
Post a Comment