Înapoi la articole →

Cel mai recent articol

Ultima verificare

Urmăritori 0 urmăritori
Articole: 9
  1. Sysmon Config Creation for The LOLRMM Framework

    I have spent the last month and a half working on a Sysmon configuration for the LOLRMM framework.

  2. While analyzing a new wave of Hancitor, I have determined that they have combined a variety of techniques together which greatly increases the effectiveness of the campaign.

  3. Reverse Engineering an Unknown RAT – Lets call it SkidRAT 1.0

    While monitoring a blogspot page that keeps embedding malicious scripts to execute on victim systems I seen some code changes that interested me.

  4. Making MetaData Tracking More Difficult – Ideas to Improve Signal.

    Currently, Telecoms and Nation States are able to see direct correlations between the source and destination of Signal messages via MetaData of those communications.

  5. While monitoring the latest Threat Intelligence and InfoSec news articles I came across an excellent article posted on April 17th, 2018 by the company “AdGuard” linked here.

  6. Detecting Ursnif Infected Word Documents through metadata.

    Good Afternoon, I have recently been working on methods to detect an Information Stealer/Trojan known as Ursnif.

  7. New PowerPoint Mouseover Based Downloader – Analysis Results

    First, I would like to thank “Marry Trame” at peerlyst.com for posting about this new method that was discovered for a malware downloader.

  8. Emotet/Geodo Updated Analysis

    Good Morning Everyone, I have created a passivetotal project for tracking of the Downloader and payload domains.

  9. Emotet/Geodo Domains

    Good Morning, While researching a wave of what other analysts alerted as Emotet/Geodo I found 128 different domains that are hosting the javascript based downloader and the payloads.