Windows TDL3 Rootkit - can now infect 64bit systems
TDL3 is the most advanced Windows rootkit developed so far. This highly technical and informative post from Prevx share another dangerous development, as 64 bit systems are more secure and difficult to manipulate.
TDL3 rootkit x64 goes in the wild
QUOTE: It took some time but now x64 Windows operating systems are officially the new target of rootkits. We talked about TDL3 rootkit some months ago as the most advanced rootkit ever seen in the wild. Well, the last version of TDL3 was released months ago and documented as build 3.273. After that, no updates have been released to the rootkit driver. This was pretty suspicious, more so if you've been used to seeing rebuild versions of TDL3 rootkit every few days to defeat security software.
Obviously, the rootkit was stable and it is currently running without any major bug on every 32 bit Windows operating system. Still though, the dropper needed administrator rights to install the infection in the system. Anyway, the team behind TDL3 rootkit was just too quiet to not expect something new. They actually built a nice gift for every security vendor, because TDL3 has been updated and this time this is a major update; the rootkit is now able to infect 64 bit versions of Microsoft Windows operating system.