I am student and I make a research.

[JIOPj]

Hello, i am student and I make research on rootkits.Which are the mordern techniques used by rootkits to infect the system?

[Stalker90]

Cyber criminals use a Black Hole Exploit kit,they compromise some web page,when you visit a page they scan your PC on vulnerabillities in Java,Adobe,IE,and other and they drop a driver,a rootkit in system.Greetings

[JIOPj]

But I am asking especially for rootkits.What techniques they use nowadays ? Hooking ssdt? Hooking IAT? Patching system rotunies?

[MAM]

Hello,

you know " aunt Google " ?

Here are the result´s for it, ---> http://www.google.de/#hl=de&output=search&sclient=psy-ab&q=research+on+rootkits&oq=research+on+rootkits&gs_l=hp.12..0i30.2563.2563.0.5891.1.1.0.0.0.0.250.250.2-1.1.0...0.0...1c.0Lf4TT4E2LE&pbx=1&bav=on.2,or.r_gc.r_pw.r_qf.&fp=980b2a006982e67c&biw=1024&bih=587

I hope that help´s out your issue.

MAM

[shadowwar]

Because rootkit is such a general term they can do any of the above things and more.

[tobor]

This document should help you: http://www.mcafee.com/us/resources/reports/rp-predicting-stealth-attacks.pdf

It goes over history of rootkit techniques.

I think most modern rootkits use IRP hooking; SSDT/IAT hooks are trivial to bypass.