Product Watch: New Free Duqu Scanner Released

NSS Labs offers open-source tool for finding new Duqu drivers

NSS Labs has built a new free tool that detects known and newly created Duqu drivers that have infiltrated systems.

The scanner is aimed at researchers in search of additional Duqu drivers beyond those that so far have been discovered. "This tool was developed in the hopes that additional drivers can be discovered to allow us to learn more about the functionality, capabilities and ultimate purpose of DuQu," according to NSS Labs researchers Mohamed Saher & Matthew Molinyawe.

Saher and Molinyawe claim the tool, which employs pattern-recognition techniques, can find all drivers with zero false positives. "Two new drivers were discovered after the tool was completed, and both were detected by the NSS tool with no updates required," they said in a blog post.

Read the full article now.