Security Affairs

JUNE 14, 2022

Researchers from antivirus firm Avast spotted a new Linux rootkit, dubbed ‘Syslogk,’ that uses specially crafted “magic packets” to activate a dormant backdoor on the device. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. Pierluigi Paganini.

Malware 79

Malware System Administration Antivirus Architecture 79

Security Affairs

MAY 19, 2023

The most interesting characteristic of the Triada Trojan apart is its modular architecture, which gives it theoretically a wide range of abilities. In March 2018, security researchers at Antivirus firm Dr. Web discovered that 42 models of low-cost Android smartphones are shipped with the Android.Triada.231 231 banking malware.

Mobile 88

Mobile Advertising Malware Cybercrime 88

Security Affairs

FEBRUARY 16, 2021

Latin American Javali trojan weaponizing Avira antivirus legitimate injector to implant malware. As mentioned, in general, this trojan was developed using the same architecture of other Latin American trojans, and the main steps of the infection chain are described below and analyzed in-depth during the next sections of this article.

Antivirus 118

Antivirus Malware Banking Internet 118

Malwarebytes

AUGUST 3, 2022

This blog post was authored by Ankur Saini and Hossein Jazi. In this blog post, we will analyze Woody Rat’s distribution methods, capabilities as well as communication protocol. The threat actor has left some debugging information including a pdb path from which we derived and picked a name for this new Rat: Debug Information.

Malware 108

Malware Encryption Antivirus Architecture 108

Malwarebytes

AUGUST 3, 2022

This blog post was authored by Ankur Saini and Hossein Jazi. In this blog post, we will analyze Woody Rat's distribution methods, capabilities as well as communication protocol. The used lure is in Russian is called " Information security memo " which provide security practices for passwords, confidential information, etc.

Malware 65

Malware Encryption Antivirus Architecture 65

Security Affairs

DECEMBER 29, 2019

This is a clear signal that most of the antivirus engines don’t detect yet the malware signature. The file is extremely large (32 MB), with a lot of junk allowing, thus, to evade antivirus engines as a result. He is also a founding member and Pentester at CSIRT.UBI and founder of the security computer blog seguranca–informatica.pt.

Malware 96

Malware Internet Internet Antivirus 96

Security Affairs

JULY 23, 2019

Code Snippet 3: Choose of the files to copy whether the target architecture is x86 or x64. Technical details, including IoCs and Yara Rules, are available in the analysis published in the Yoroi blog. Its content is minimal and quickly redirect the execution to a small batch file, “installer.bat” contained in the same folder.

Malware 72

Malware Advertising Antivirus Architecture 72