Malware Analysis | So Long, and Thanks for All the Fish

Also Node.js has been used to perform a Living off the Land (LotL) attack

On October 2, 2019 By Andrea Fortuna In Malware Analysis

Researchers from Cisco Talos recently discovered a new malware loader being used to deliver and infect systems using NodeJS as well as the legitimate open-source utility WinDivert.

PEpper: a python script to perform malware static analysis on Portable Executable format

On September 25, 2019 By Andrea Fortuna In Cybersecurity, Malware Analysis

A useful tool: fast and easy to use.

CVE-2019-1132: a Windows Zero-Day exploited by Buhtrap Group in espionage campaigns

On July 12, 2019 By Andrea Fortuna In Cybersecurity, Malware Analysis

According to experts at ESET, the Windows zero-day vulnerability CVE-2019-1132 was exploited by the Buhtrap threat group in a targeted attack aimed at a government organization in Eastern Europe.

New version of FinFisher spyware used to spy on iOS and Android users in 20 countries

On July 12, 2019 By Andrea Fortuna In Cybersecurity, Malware Analysis

Malware researchers from Kaspersky have discovered new and improved versions of the FinFisher spyware, able o infect both Android and iOS devices. According to the experts, the new versions have been active at least since …

‘Agent Smith’ malware has infected Android apps on 25 million devices

On July 11, 2019 By Andrea Fortuna In Cybersecurity, Malware Analysis

According to security firm Check Point, a newly discovered Android malware that replaces portions of apps with its own code has infected more than 25 million devices.