article thumbnail

StripedFly: Perennially flying under the radar

SecureList

It comes equipped with a built-in TOR network tunnel for communication with command servers, along with update and delivery functionality through trusted services such as GitLab, GitHub, and Bitbucket, all using custom encrypted archives. The malware executable file is placed in /tmp directory with a random name. 8, 15.0.0.0/8, 8, 16.0.0.0/8,

Malware 118
article thumbnail

Indicators of compromise (IOCs): how we collect and use them

SecureList

We have been doing so since 2008, benefiting from Kaspersky’s decades of cyberthreat data management, and unrivaled technologies. This is the most precious source of intelligence as it provides unique and reliable data from trusted systems and technologies. But why are we offering cyber threat intelligence at all?

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Mystic Stealer

Security Boulevard

Enter Mystic Stealer, a fresh stealer lurking in the cyber sphere, noted for its data theft capabilities, obfuscation, and an encrypted binary protocol to enable it to stay under the radar and evade defenses. Example Mystic Stealer constant obfuscation technique Encrypted binary custom protocol. All data is encrypted with RC4.

article thumbnail

Best Network Monitoring Tools for 2022

eSecurity Planet

AES-256 encryption for data at rest and TLS v1.2 Catchpoint launched in 2008 as a dedicated monitoring tools provider right as organizations started to dabble with cloud services. Reviews highlight the ease of setup and integration with standard APIs , component monitoring capabilities, and intelligent network traffic analysis.

Marketing 120
article thumbnail

Top VC Firms in Cybersecurity of 2022

eSecurity Planet

Born from two board members of AVG Technologies, Evolution Equity Partners started in 2008 to help US and European-based entrepreneurs in cybersecurity, enterprise software, and consumer-enterprise crossover segments. In 2008, the Washington, DC-based firm made a prudent decision by shifting its focus to cybersecurity. NightDragon.

article thumbnail

After Section 702 Reauthorization

Schneier on Security

Section 702 was initially passed in 2008, as an amendment to the Foreign Intelligence Surveillance Act of 1978. Bush in 2008, reauthorized under Barack Obama in 2012, and now reauthorized again under Trump. Second, we need to limit how other law enforcement agencies can use incidentally collected information. This has to stop.