On Sunday, November 23, 2014 7:40:27 PM UTC-8, RayLopez99 wrote:
 
http://www.usnews.com/news/articles/2014/11/24/regin-spyware-monitored-russian-
saudi-networks 

The spyware has an equally impressive ability to disguise itself by working in
five stages, only the first of which is detectable because each step is
encrypted, leaving Symantec uncertain of how the malware spreads.


RL

Does anybody care to speculate how the 'steps' are encrypted?  I can see how a
virus is encrypted, so the hash looks different, but is this something else?

RL
--- NewsGate v1.0 gamma 2