Creating a YARA Rule to Detect Obfuscated Strings, (Mon, Sep 4th)

I wrote a blog post “Quickpost: Analysis of PDF/ActiveMime Polyglot Maldocs” on how to analyse PDF/ActiveMime polyglot malicious document files and also developed a YARA rule to detect them.
http://news.poseidon-us.com/SvbfDX