SecureList

FEBRUARY 25, 2021

Google TAG has recently published a post about a campaign by Lazarus targeting security researchers. Before launching the attack, the group studied publicly available information about the targeted organization and identified email addresses belonging to various departments of the company. com/blog/wp-content/uploads/2017/cache[.]php.

Malware 133

Malware Phishing Passwords Encryption 133

LRQA Nettitude Labs

OCTOBER 18, 2023

in the case of runtime libraries) where you can’t even enforce that RTTI is enabled. this is a valid case that CastGuard should protect against), otherwise it returns false. These are all valid. If it is, the AppCompat check returns true (i.e.

Engineering 91

Engineering 91

Notice Bored

OCTOBER 20, 2021

You'll see that it mentions the Information Classification Policy : I'll have more to blog about classification tomorrow. The precise wording is important here (I'll return to that point in another blog piece). Policy title , big and bold to stand out.

Information Security 56

Information Security Risk Encryption Passwords 56

Elie

AUGUST 31, 2017

This series of three blog posts summarizes the key findings of our large-scale study. This blog post, the first in the series, explains the methodology and techniques we developed to trace ransomware payments end-to-end. To find these needles in the haystack we wrote rules that matched each variant of each ransomware family.

Ransomware 115

Ransomware Backups Encryption Scams 115

SecureList

APRIL 27, 2021

In the second case, the server hosting FinFly Web was already offline at the moment of discovery, so we drew our conclusions using available historical data. In November and December 2020, two public blog posts were published about this campaign.

Malware 139

Malware Spyware Government Social Engineering 139

Scary Beasts Security

MAY 5, 2017

It’s hard to imagine a better real vulnerability exists for the study of this area. For what it’s worth, the woeful state of WebKit packaging on Linux was discussed in Feb 2016 in this blog post , which was picked up by Linux Weekly News. But the steps taken are the same for both the 64-bit and 32-bit cases.

Hacking 126

Hacking Mobile Accountability 126

Security Affairs

APRIL 12, 2019

In the specific case, the code tries to read the value contained within the “Company” property, which is embedding a base64 encoded string. Figure 4: Payload stored in “Company” tag of document metadata. The blog post, in fact, explains both AMSI and BlockLogging disabling techniques. Stay Tuned.

Malware 93

Malware Passwords Advertising Government 93

SiteLock

AUGUST 27, 2021

Have you ever had trouble keeping up with your blog post schedule? If you’ve hit a wall with blogging, it’s likely due to one of these reasons: A lack of time. There are many forms of content you can find and share: Articles (blog posts). Case studies and more. A lack of inspiring subject matter. Interviews.

Marketing 52

Marketing 52