Remove 2008 Remove Data collection Remove DNS Remove Malware
article thumbnail

StripedFly: Perennially flying under the radar

SecureList

Introduction It’s just another cryptocurrency miner… Nobody would even suspect the mining malware was merely a mask, masquerading behind an intricate modular framework that supports both Linux and Windows. This malware employed a custom EternalBlue SMBv1 exploit to infiltrate its victims’ systems.

Malware 107
article thumbnail

Indicators of compromise (IOCs): how we collect and use them

SecureList

We have been doing so since 2008, benefiting from Kaspersky’s decades of cyberthreat data management, and unrivaled technologies. This is the most precious source of intelligence as it provides unique and reliable data from trusted systems and technologies. Onyphe ), passive DNS databases, public sandbox reports, etc.

article thumbnail

Mystic Stealer

Security Boulevard

Stealers" are a kind of malware designed to run on an endpoint post-compromise, while their primary features center on the theft of user data. Together with our colleagues at InQuest, we present a deep dive technical analysis of the malware. The same way you do in the real world – the market becomes flooded.