Computers and Electronics Encryption Malware Penetration Testing 
Security Affairs
OCTOBER 17, 2018
Yoroi security firm uncovered a targeted attack against one of the most important companies in the Italian Naval Industry leveraging MartyMcFly Malware. At a first sight, the office document had an encrypted content available on OleObj.1 And why the attacker used an encrypted payload if the victim cannot open it? 1 and OleObj.2.
Security Affairs
APRIL 5, 2019
Malware researcher and founder of Yoroi Marco Ramill described a step-by-step procedure that shows how to dissect an Office dropper. Both of those tricks are quite well-known in the malware industry. In the first case (HTTP GET) the Malware communicates to server through cookies, using a 6 digit numeric variable.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Security Affairs
OCTOBER 1, 2019
The malware expert Marco Ramilli collected a small set of VBA Macros widely re-used to “weaponize” Maldoc (Malware Document) in cyber attacks. Here comes the idea to collect a small set of VBA Macros widely re-used to “weaponize” Maldoc (Malware Document) in contemporary cyber attacks.
Security Affairs
AUGUST 20, 2018
The popular malware researchers Marco Ramilli has analyzed a malware that remained under the radar for more than two years. The first thought that you might have as an experienced malware reverse engineer would be: “Ok, another bytecode reversing night, easy. Resource (a.k.a package in where it will be contextualized).
Security Affairs
OCTOBER 14, 2019
Cybercrime gang behind the Emotet malware is targeting organization with external SOC with emails claiming to deliver a SOC “weekly report.”. The group behind Emotet malware is getting smarter and smarter in the way the y deliver such a Malware. I am a computer security scientist with an intensive hacking background.
SecureList
NOVEMBER 22, 2022
Unlike common stealers, this malware gathered data that can be used to identify the victims, such as browsing histories, social networking account IDs and Wi-Fi networks. In the past, many actors would join forces to attack and encrypt as many organizations around the world as possible. ATM and PoS malware to return with a vengeance.
Security Affairs
AUGUST 7, 2019
T1388) , from group_b to group_d time frames OilRig used real Compromised User Accountsextracted by Malware (rif. They begun development by introducing crafted communication protocol over DNS and later they added, to such a layer, encoding and encryption self build protocols. Exploit Technique Over Time.
Expert insights. Personalized for you.
88 
Let's personalize your content