Pentester Academy

FEBRUARY 23, 2023

Introduction In May 2017, a worldwide ransomware attack infamously known as WannaCry was set in motion. This ransomware made use of the EternalBlue , an exploit of Microsoft’s implementation of their SMB protocol, released by The Shadow Brokers hacker group in April 2017, to gain access to remote Windows machines in most cases.

Ransomware 52

Ransomware Encryption Cryptocurrency Banking 52

Security Affairs

OCTOBER 17, 2018

Using an encrypted payload is quite a common way to evade Antivirus, since the encrypted payload changes depending on the used key. It’s not hard to see what the payload does (CVE-2017-11882 ), but if you run it on a dynamic engine you would probably have more chances to prove it. Stage1: Encrypted Content. But what is the key?

Malware 87

Malware Computers and Electronics Encryption Penetration Testing 87

Spinone

DECEMBER 16, 2019

The locker ransomware was more popular years ago, before the mass adoption of cloud technologies and services (like G Suite and Office 365). Ransomware Examples WannaCry was one of the major headliners in 2017. Petya was a reason behind many attacks during 2016 and 2017. You have likely heard of some of them.

Ransomware 52

Ransomware Cybersecurity Backups Social Engineering 52

SecureList

APRIL 27, 2021

Further investigation of the Sunburst backdoor revealed several features that overlap with a previously identified backdoor known as Kazuar , a.NET backdoor first reported in 2017 and tentatively linked to the Turla APT group. In November and December 2020, two public blog posts were published about this campaign.

Malware 142

Malware Spyware Government Social Engineering 142

SecureList

AUGUST 12, 2021

Web antivirus recognized 675,832,360 unique URLs as malicious. Our file antivirus detected 68,294,298 unique malicious and potentially unwanted objects. In their blog, DarkSide’s creators heaped the blame on third-party operators. Ransomware attacks were defeated on the computers of 97,451 unique users.

Adware 97

Adware Malware Ransomware IoT 97

Elie

MAY 30, 2018

This blog post survey the attacks techniques that target AI (artificial intelligence) systems and how to protect against them. Adversarial inputs include malicious documents designed to evade antivirus, and emails attempting to evade spam filters. NIST (National Institute of Standards and Technology) cybersecurity event recovery guide.

Accountability 107

Accountability Artificial Intelligence Engineering Retail 107

Elie

MAY 30, 2018

This blog post survey the attacks techniques that target AI (artificial intelligence) systems and how to protect against them. Adversarial inputs include malicious documents designed to evade antivirus, and emails attempting to evade spam filters. NIST (National Institute of Standards and Technology) cybersecurity event recovery guide.

Accountability 91

Accountability Artificial Intelligence Engineering Retail 91

SecureList

JANUARY 11, 2021

On December 13, 2020, FireEye published a blog post detailing a supply chain attack leveraging Orion IT, an infrastructure monitoring and management platform by SolarWinds. In a previous blog, we dissected the method used by Sunburst to communicate with its C2 server and the protocol by which victims are upgraded for further exploitation.

Malware 65

Malware Media Internet Internet 65