genoff

My bike rides stopped syncing to my phone.

After a recent analysis of multiple files grabbed from a device, this appears to be a new strain of the AutoIT Malware campaign that includes RedLine Stealer.

The goal of this final project was to analyze five memory dumps containing malicious activity and to come to a conclusion on what malware family it belonged to.

CVE Number: CVE-2019-13336 Foreword Before I get into this writeup, I’d like to thank Tamir Israel from the CIPPIC for helping me with legal issues regarding this disclosure and the EFF for referring me to him.