Next-Generation Enduser Protection vs. 1-byte XOR
Channel: Buherator Buhera
Date: 2015-01-27

0) Got spam^W marketing e-mail from Sophos
1) Watched this video: http://vimeo.com/117200420 
2) Used Heureka (https://github.com/silentsignal/heureka) to obfuscate a standard Meterpreter payload with 1-byte XOR
3) Installed Next-Generation Enduser Protection 
4) Made this video

VirusTotal results (because it's not only Sophos): https://www.virustotal.com/hu/file/39b797e640f8f557c1cfb9fb218439015a29f350aba36223a7ce0d0b378506ab/analysis/1422374692/

Oh, and yes, I can easily migrate to the process of the AV, run local exploits, dump credentials, etc.