Malware Development – Welcome to the Dark Side: Part 2-1
Welcome to the second part of the malware development blog series. Here’s the link to Part 1. Given the length of Part 2, I have […]
Category: Malware Analysis
Fundamentals Hacks Malware Analysis Penetration Testing Research Security Testing Social Engineering Tools
Malware Development – Welcome to the Dark Side: Part 1
If you are in cybersecurity, especially Red Teaming, writing a full-undetectable (FUD) malware is a great skill to have. Folks tend to use Metasploit combined […]
Zepto Ransomware Analysis and How to Protect Yourself
Introduction Ransomware is a malware which encrypts all files on disk and prevents the users from accessing their system. It has become a raging epidemic […]
Malware Mumblehard
Spam-blasting malware infects thousands of Linux and FreeBSD servers. – Ars Technica, Apr 30, 2015. Mumblehard Malware: Linux-Based Spam Generator Went Unnoticed for Five Years. […]
Anatomy of a Credit Card Stealing POS Malware
INTRODUCTION Point-of-sale (POS) is the place where a retail transaction is completed. It is the point at which a customer makes a payment to the […]
Cuckoo Sandbox 102: State-of-the-art Malware Analysis
Introduction Cuckoo Sandbox is an Open Source Automated Malware Analysis system that has been gaining more and more attention in recent years. The fact that […]
Asus RT-N10 Plus Cross Site Scripting CVE-2015-1437
Overview ASUS Router RT-N10 Plus is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the result_of_get_changed_status.asp script. A remote authenticated attacker […]
Shellshock Exploitation: Using BeEF Framework
In a previous article, we have described the Shellshock vulnerability and in this article we show how to exploit this vulnerability using the BeEF Framework. […]
POODLE Advisory
What is POODLE? POODLE stands for Padding Oracle On Downgraded Legacy Encryption Vulnerability CVE: CVE-2014-3566 What is the attack? The attack occurs when an attacker […]
Analysis of Malware: Detecting Behavior & Anti-Reversing Techniques
Scenario: One of our clients observed a suspicious behavior in a program and wanted us to analyze and identify if any malicious activities were being […]