Agent Tesla Receives AMSI Targeting Update

Read the original article: Agent Tesla Receives AMSI Targeting Update


ZDNet reports that researchers at Sophos have discovered two new variants of AgentTesla, a remote access trojan, which include new features for the malware to evade detection by tampering with Microsoft Anti-Malware Software Interface (AMSI). Using a series of base64 encoded data chunks to hide its malware payload from inspection, AgentTesla first attempts to disarm […]

The post Agent Tesla Receives AMSI Targeting Update appeared first on Binary Defense.


Read the original article: Agent Tesla Receives AMSI Targeting Update