Malware News

2022-04-19 17:35:28 The FBI, CISA & US Treasury Department have released a joint advisory to highlight the threat associated with cryptocurrency thefts & tactics used by a North Korean state-sponsored APT group (Lazarus/APT38/BlueNoroff/Stardust Chollima) since at least 2020 https://www.cisa.gov/uscert/ncas/alerts/aa22-108a
virusbtn


@malwr Open / Comment

2022-04-18 21:54:43 Sysmon's RegistryEvent (Value Set) https://i5c.us/d28558
sans_isc


@malwr Open / Comment

2022-04-18 12:07:11 Check out the new blog post about my journey in implementing the technical aspects of Windhawk - implementing global injection and hooking in Windows.
https://m417z.com/Implementing-Global-Injection-and-Hooking-in-Windows/
m417z


@malwr Open / Comment

2022-04-17 20:21:09 New Trend Micro data shows that Purple Fox operators are using trojanized software packages to trick users into downloading their payloads.

Read about #PurpleFox’s infection chain and learn about its new campaign here: https://research.trendmicro.com/36x6pPz
TrendMicroRSRCH


@malwr Open / Comment

2022-04-17 17:07:40 New Blog! Lessons from the Conti Leaks

https://blog.bushidotoken.net/2022/04/lessons-from-conti-leaks.html
BushidoToken


@malwr Open / Comment

2022-04-17 12:32:29 This repository contains a Red team Offensive Security Exploitation Tool
which uses TOR and OnionShare as long with Meterpreter Session.

https://github.com/ToxicEnvelope/SetmPloit

Sent from one of our channel members

@malwr Open / Comment

2022-04-16 16:19:10 Updated my ScheduleRunner to include the "hiding scheduled task" technique used by Tarrask malware. This technique can literally make your scheduled task invisible from query tools and Task Scheduler.
https://github.com/netero1010/ScheduleRunner
netero_1010


@malwr Open / Comment

2022-04-15 13:03:43 Blog post #3

In this blog, I cover the basics of the translation process of a virtual memory address into physical memory address as well as the PTE structure and usage of another WinAPI function with examples.

https://de-engineer.github.io/Virtual-Address-Translation-and-structure-of-PTE

#infosec
coder_rc


@malwr Open / Comment

2022-04-15 10:58:07 My final blog post for varonis is now available which outlines how to get started with volatility. This tool is an absolute necessity for anybody in Incident Response and will prove invaluable when triaging compromised servers. #Malware

https://www.varonis.com/blog/how-to-use-volatility
0xf0x_


@malwr Open / Comment

2022-04-15 04:34:44 Big Brother's Left Eye - will tell you how to stay anonymous on the network, talk about hacking tools, as well as tell you how we developed a scheme by which we were able to earn more than $ 200k!
We are waiting for you in our channel: https://t.me/+RO4AoGENjWI4NzEx Open / Comment