Computers and Electronics, Cybersecurity, Malware and Penetration Testing

Security expert Marco Ramilli released for free the Malware Hunter tool

Security Affairs

FEBRUARY 6, 2019

Malware researcher Marco Ramilli released for free the Malware Hunter tool a simple but interesting catching tool base on static YARA rules. Malware researcher Marco Ramilli released for free the Malware Hunter tool a simple but interesting catching tool base on static YARA rules. Malware Static Analysis.

Malware

Malware Computers and Electronics Penetration Testing Advertising

Malware Training Sets: FollowUP

Security Affairs

MAY 14, 2019

The popular expert Marco Ramilli provided a follow up to its Malware classification activity by adding a scripting section which would be useful for several purposes. On 2016 I was working hard to find a way to classify Malware families through artificial intelligence (machine learning).

Malware

Malware Artificial Intelligence Computers and Electronics Penetration Testing

Free Tool: Honey Feed

Security Affairs

FEBRUARY 18, 2019

Cybersecurity expert Marco Ramilli shared another tool of his arsenal that extracts suspicious IPs from undesired connections, his HoneyPots. Hope you might appreciate my intent to share with cybersecurity community free data in order to improve our digital space. In other words: HoneyPots. HoneyPot Page.

Computers and Electronics

Computers and Electronics Penetration Testing Advertising Malware

MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry

Security Affairs

OCTOBER 17, 2018

Yoroi security firm uncovered a targeted attack against one of the most important companies in the Italian Naval Industry leveraging MartyMcFly Malware. Further details on the MartyMcFly malware are reported in the original analysis published by Marco Ramilli on his blog. Security Affairs – MartyMcFly , malware).

Malware

Malware Computers and Electronics Encryption Penetration Testing

Scraping the TOR for rare contents

Security Affairs

JULY 18, 2019

First of all you need an exceptional computational power (RAM mostly) for letting multiple runners grab web-pages, extracting new links and re-run the scraping-code against the just extracted links. I am a computer security scientist with an intensive hacking background. Scraping the “TOR hidden world” is a quite complex topic.

Computers and Electronics

Computers and Electronics Penetration Testing Advertising Technology

Writing Your First Bootloader for Better Analyses

Security Affairs

SEPTEMBER 3, 2019

Marco Ramilli explained MBR works and how is it possible to write a bootloader program, this skill will help you to analyze next BootLoader Malware. From time to time we might observe special Malware storing themselves into a MBR and run during the booting process. SecurityAffairs – malware, bootloader ). Pierluigi Paganini.

Computers and Electronics

Computers and Electronics Penetration Testing Malware Advertising

Frequent VBA Macros used in Office Malware

Security Affairs

OCTOBER 1, 2019

The malware expert Marco Ramilli collected a small set of VBA Macros widely re-used to “weaponize” Maldoc (Malware Document) in cyber attacks. Nowadays one of the most frequent cybersecurity threat comes from Malicious (office) document shipped over eMail or Instant Messaging. About the author: Marco Ramilli, Founder of Yoroi.

Malware

Malware Computers and Electronics Penetration Testing Cyber Attacks

From Targeted Attack to Untargeted Attack

Security Affairs

JUNE 17, 2019

Today I’d like to share an interesting and heavily obfuscated Malware which made me thinking about the meaning of ‘Targeted Attack’ Nowadays a Targeted Attack is mostly used to address state assets or business areas. It looks like a romantic Emotet according to many Antivirus so I wont invest timing into this well-known Malware.

Computers and Electronics

Computers and Electronics Penetration Testing Antivirus Malware

University, Professional Certification or Direct Experience?

Security Affairs

SEPTEMBER 8, 2019

Would it be better a university course , a professional certification or an experience in a cybersecurity firm? Today I’d like to share a simple and personal thought about teaching models on cybersecurity. a researcher, a professional penetration tester, a reverse engineer, a CISO, etc.) Photo by Sharon McCutcheon on Unsplash.

Computers and Electronics

Computers and Electronics Penetration Testing Education Cybersecurity

Crimeware and financial cyberthreats in 2023

SecureList

NOVEMBER 22, 2022

The predictions, based on our extensive experience, help individuals and businesses improve their cybersecurity and prevent the vast range of possible risks. Unlike common stealers, this malware gathered data that can be used to identify the victims, such as browsing histories, social networking account IDs and Wi-Fi networks.

Cryptocurrency

Cryptocurrency Mobile Ransomware Banking

Analyzing the APT34’s Jason project

Security Affairs

JUNE 6, 2019

I am a computer security scientist with an intensive hacking background. I do have a MD in computer engineering and a PhD on computer security from University of Bologna. I do have experience in security testing since I have been performing penetration testing on several US electronic voting systems.

Computers and Electronics

Computers and Electronics Penetration Testing DNS Passwords

OilRig APT group: the evolution of attack techniques over time

Security Affairs

AUGUST 7, 2019

T1388) , from group_b to group_d time frames OilRig used real Compromised User Accountsextracted by Malware (rif. I am a computer security scientist with an intensive hacking background. I do have a MD in computer engineering and a PhD on computer security from University of Bologna. Exploit Technique Over Time.

Computers and Electronics

Computers and Electronics Penetration Testing DNS Phishing

Writing Your First Bootloader for Better Analyses

Security Affairs

SEPTEMBER 3, 2019

Marco Ramilli explained MBR works and how is it possible to write a bootloader program, this skill will help you to analyze next BootLoader Malware. From time to time we might observe special Malware storing themselves into a MBR and run during the booting process. SecurityAffairs – malware, bootloader ). Pierluigi Paganini.

Computers and Electronics

Computers and Electronics Penetration Testing Malware Advertising

TA505 Cybercrime targets system integrator companies

Security Affairs

NOVEMBER 12, 2019

The two Macros decoded a Javascript payload acting as a drop and execute by using a well-known strategy as described in: “ Frequent VBA Macros used in Office Malware ”. The TA505 group , that is known to have operated both the Dridex and Locky malware families, continues to make small changes to its operations. 66.133.129.5)

Cybercrime

Cybercrime Computers and Electronics Penetration Testing Malware

Attack of drones: airborne cybersecurity nightmare

Security Affairs

DECEMBER 2, 2022

There exists a class of tiny and highly maneuverable devices that introduce a variety of cybersecurity risks you probably haven’t considered before. Drones currently occupy a unique legal position as they are classified as both aircraft and networked computing devices. Dronesploit.

Cybersecurity

Cybersecurity Wireless Computers and Electronics Penetration Testing

Application Security: Complete Definition, Types & Solutions

eSecurity Planet

FEBRUARY 13, 2023

Web application scanners test your websites and web-facing apps for vulnerabilities. These tests typically use vulnerability scanners. Penetration testing is a similar approach, but typically involves teams of security pros attempting to simulate a cyber attack to identify weaknesses that could be exploited by hackers.

Mobile

Mobile Computers and Electronics Risk DDOS

Top Cybersecurity Accounts to Follow on Twitter

eSecurity Planet

DECEMBER 3, 2021

Fifteen years after the launch of the microblogging social media platform, Twitter remains a dominant public forum for instant communication with individuals and organizations worldwide on a universe of topics, including #cybersecurity. Top Cybersecurity Experts to Follow on Twitter. Binni Shah | @binitamshah. Eva Galperi n | @evacide.

Accountability

Accountability Cybersecurity Penetration Testing InfoSec

Free Tools: spotting APTs through Malware streams

Security Affairs

MARCH 25, 2019

Cyber security expert and founder of Yoroi has published a new tool that could be used to spot APTs (A dvanced Persistent Threats) through Malware streams. Today I’d like to share a little bit of my personal experience on spotting APTs through Malware streams. I am a computer security scientist with an intensive hacking background.

Malware

Malware Computers and Electronics Penetration Testing Advertising

Cyber Threats Observatory Gets Improvements

Security Affairs

MAY 3, 2020

The main improvement sees the introduction of clustering stereotypes for each tracked malware family in three different behaviors: Domains , Files and Processes. According to shared information, the Cyber Threats Observatory Dashboard is composed by the following sections: Malware Families Trends. Malware Families. Stereotypes.

Cyber threats

Cyber threats Computers and Electronics Malware Penetration Testing

The evolutions of APT28 attacks

Security Affairs

DECEMBER 4, 2019

On one hand the delivery vector is often the only (or the first) artifact (such as: a Malware, a Link or exploit kit usage) that the cybersecurity analyst could observe. Since the main findings that I had analyzed for this post are Malware based, it makes sense to talk about Installation rather than talking about persistence.

Computers and Electronics

Computers and Electronics Penetration Testing Technology Malware

APT34: Glimpse project

Security Affairs

MAY 2, 2019

I am a computer security scientist with an intensive hacking background. I do have a MD in computer engineering and a PhD on computer security from University of Bologna. I do have experience on security testing since I have been performing penetration testing on several US electronic voting systems.

DNS

DNS Computers and Electronics Penetration Testing Government

Similarities and differences between MuddyWater and APT34

Security Affairs

JUNE 26, 2019

I am a computer security scientist with an intensive hacking background. I do have a MD in computer engineering and a PhD on computer security from University of Bologna. I do have experience on security testing since I have been performing penetration testing on several US electronic voting systems.

Computers and Electronics

Computers and Electronics Penetration Testing Advertising Technology

Iranian Threat Actors: Preliminary Analysis

Security Affairs

JANUARY 15, 2020

Nowadays Iran’s Cybersecurity capabilities are under the microscope, experts warn about a possible infiltration of the Iranian government. Nowadays Iran’s Cybersecurity capabilities are under microscope, many news sites, gov. Nowadays Iran’s Cybersecurity capabilities are under microscope, many news sites, gov. CopyKittens.

Computers and Electronics

Computers and Electronics Penetration Testing Malware Government

Iran-linked APT34: Analyzing the webmask project

Security Affairs

APRIL 23, 2019

I am a computer security scientist with an intensive hacking background. I do have a MD in computer engineering and a PhD on computer security from University of Bologna. I do have experience on security testing since I have been performing penetration testing on several US electronic voting systems.

DNS

DNS Computers and Electronics Penetration Testing Government

Cyber CEO: The History Of Cybercrime, From 1834 To Present

Herjavec Group

AUGUST 26, 2021

In the past 18 months, we’ve experienced the beginning of an era that has seen cybersecurity and cybercrime at the center of it all. Since the pandemic began, cybersecurity has been named a top priority for national security and we’ve witnessed some of the largest, and most destructive cyber breaches in history.

Cybercrime

Cybercrime Computers and Electronics Banking Hacking

Cyber Security Informer

Security expert Marco Ramilli released for free the Malware Hunter tool

Malware Training Sets: FollowUP

Trending Sources

Free Tool: Honey Feed

MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry

Scraping the TOR for rare contents

Writing Your First Bootloader for Better Analyses

Frequent VBA Macros used in Office Malware

From Targeted Attack to Untargeted Attack

University, Professional Certification or Direct Experience?

Crimeware and financial cyberthreats in 2023

Analyzing the APT34’s Jason project

OilRig APT group: the evolution of attack techniques over time

Writing Your First Bootloader for Better Analyses

TA505 Cybercrime targets system integrator companies

Attack of drones: airborne cybersecurity nightmare

Application Security: Complete Definition, Types & Solutions

Top Cybersecurity Accounts to Follow on Twitter

Free Tools: spotting APTs through Malware streams

Cyber Threats Observatory Gets Improvements

The evolutions of APT28 attacks

APT34: Glimpse project

Similarities and differences between MuddyWater and APT34

Iranian Threat Actors: Preliminary Analysis

Iran-linked APT34: Analyzing the webmask project

Cyber CEO: The History Of Cybercrime, From 1834 To Present

Stay Connected