Carberp木马研究资料

Carberp / Rovnix Analysis
http://go.eset.com/us/resources/white-papers/carberp.pdf
http://www.welivesecurity.com/2013/03/25/carberp-the-never-ending-story/
http://www.welivesecurity.com/2011/08/23/hasta-la-vista-bootkit-exploiting-the-vbr/
http://www.welivesecurity.com/2012/02/22/rovnix-reloaded-new-step-of-evolution/
http://www.welivesecurity.com/2012/07/13/rovnix-bootkit-framework-updated/
http://www.welivesecurity.com/2012/07/27/rovnix-d-the-code-injection-story/
http://pxnow.prevx.com/content/blog/carberp-a_modular_information_stealing_trojan.pdf

Arrests
http://www.welivesecurity.com/2012/07/02/all-carberp-botnet-organizers-arrested/
http://www.welivesecurity.com/2012/06/04/carberp-and-hodprot-six-more-gang-members-held/
http://www.welivesecurity.com/2012/03/20/win32carberp-gang-on-the-carpet/