Zlob has been around for quite some time now and it is still evolving rapidly. If we thought of Zlob as a car, it has gone through the equivalent of several overhaulings... Zlob constantly changes its decryption, obfuscation, and structure.
 
As is our everyday routine, we were looking at several new variants of Zlob this morning and found this interesting message inside one of them:
 
Message within zlob
 
"I want to see your eyes the man from Windows Defender's team"
 
It's the first time we've seen the Zlob writers include such a message.
 
We wonder why? Hmmm... Perhaps this message shows that our detections are improving and the malware writers are having a hard time with us.
 
Based on our statistics from January 2008 til present, Zlob is still one of our most prevalent threats.
 
threats chart
 
So, having an eye-to-eye with Zlob writers? We don't think so!!!
 
--Francis and Elda