Computers and Electronics, Hacking, Malware and Penetration Testing

Security expert Marco Ramilli released for free the Malware Hunter tool

Security Affairs

FEBRUARY 6, 2019

Malware researcher Marco Ramilli released for free the Malware Hunter tool a simple but interesting catching tool base on static YARA rules. Malware researcher Marco Ramilli released for free the Malware Hunter tool a simple but interesting catching tool base on static YARA rules. Malware Static Analysis.

Malware

Malware Computers and Electronics Penetration Testing Advertising

Using Microsoft Powerpoint as Malware Dropper

Security Affairs

NOVEMBER 16, 2018

Marco Ramilli, founder and CEO at cyber security firm Yoroi has explained how to use Microsoft Powerpoint as Malware Dropper. Nowadays Microsoft office documents are often used to propagate Malware acting like dynamic droppers. The final payload looks like AzoRult Malware. Security Affairs – Microsoft Powerpoint, malware).

Malware

Malware Computers and Electronics Penetration Testing Advertising

Malware Training Sets: FollowUP

Security Affairs

MAY 14, 2019

The popular expert Marco Ramilli provided a follow up to its Malware classification activity by adding a scripting section which would be useful for several purposes. On 2016 I was working hard to find a way to classify Malware families through artificial intelligence (machine learning).

Malware

Malware Artificial Intelligence Computers and Electronics Penetration Testing

Free Tool: Honey Feed

Security Affairs

FEBRUARY 18, 2019

Early February, Marco Ramilli released for free the Malware Hunter tool a simple but interesting catching tool based on static YARA rules. I am a computer security scientist with an intensive hacking background. I do have a MD in computer engineering and a PhD on computer security from University of Bologna.

Computers and Electronics

Computers and Electronics Penetration Testing Advertising Malware

Sustes Malware: CPU for Monero

Security Affairs

SEPTEMBER 20, 2018

Sustes Malware doesn’t infect victims by itself, but it is spread via brute-force activities with special focus on IoT and Linux servers. Sustes Malware doesn’t infect victims by itself (it’s not a worm) but it is spread over the exploitation and brute-force activities with special focus on IoT and Linux servers.

Malware

Malware Computers and Electronics Penetration Testing Cryptocurrency

MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry

Security Affairs

OCTOBER 17, 2018

Yoroi security firm uncovered a targeted attack against one of the most important companies in the Italian Naval Industry leveraging MartyMcFly Malware. Further details on the MartyMcFly malware are reported in the original analysis published by Marco Ramilli on his blog. Security Affairs – MartyMcFly , malware).

Malware

Malware Computers and Electronics Encryption Penetration Testing

Writing Your First Bootloader for Better Analyses

Security Affairs

SEPTEMBER 3, 2019

Marco Ramilli explained MBR works and how is it possible to write a bootloader program, this skill will help you to analyze next BootLoader Malware. From time to time we might observe special Malware storing themselves into a MBR and run during the booting process. SecurityAffairs – malware, bootloader ). Pierluigi Paganini.

Computers and Electronics

Computers and Electronics Penetration Testing Malware Advertising

Scraping the TOR for rare contents

Security Affairs

JULY 18, 2019

First of all you need an exceptional computational power (RAM mostly) for letting multiple runners grab web-pages, extracting new links and re-run the scraping-code against the just extracted links. I am a computer security scientist with an intensive hacking background. Scraping the “TOR hidden world” is a quite complex topic.

Computers and Electronics

Computers and Electronics Penetration Testing Advertising Technology

From Targeted Attack to Untargeted Attack

Security Affairs

JUNE 17, 2019

Today I’d like to share an interesting and heavily obfuscated Malware which made me thinking about the meaning of ‘Targeted Attack’ Nowadays a Targeted Attack is mostly used to address state assets or business areas. It looks like a romantic Emotet according to many Antivirus so I wont invest timing into this well-known Malware.

Computers and Electronics

Computers and Electronics Penetration Testing Antivirus Malware

Frequent VBA Macros used in Office Malware

Security Affairs

OCTOBER 1, 2019

The malware expert Marco Ramilli collected a small set of VBA Macros widely re-used to “weaponize” Maldoc (Malware Document) in cyber attacks. Here comes the idea to collect a small set of VBA Macros widely re-used to “weaponize” Maldoc (Malware Document) in contemporary cyber attacks.

Malware

Malware Computers and Electronics Penetration Testing Cyber Attacks

Crimeware and financial cyberthreats in 2023

SecureList

NOVEMBER 22, 2022

Unlike common stealers, this malware gathered data that can be used to identify the victims, such as browsing histories, social networking account IDs and Wi-Fi networks. More cryptocurrency-related threats: fake hardware wallets, smart contract attacks, DeFi hacks, and more. One of the most striking new stealers has been OnionPoison.

Cryptocurrency

Cryptocurrency Mobile Ransomware Banking

Step By Step Office Dropper Dissection

Security Affairs

APRIL 5, 2019

Malware researcher and founder of Yoroi Marco Ramill described a step-by-step procedure that shows how to dissect an Office dropper. Both of those tricks are quite well-known in the malware industry. In the first case (HTTP GET) the Malware communicates to server through cookies, using a 6 digit numeric variable.

Computers and Electronics

Computers and Electronics Penetration Testing Malware Encryption

Is Emotet gang targeting companies with external SOC?

Security Affairs

OCTOBER 14, 2019

Cybercrime gang behind the Emotet malware is targeting organization with external SOC with emails claiming to deliver a SOC “weekly report.”. The group behind Emotet malware is getting smarter and smarter in the way the y deliver such a Malware. I am a computer security scientist with an intensive hacking background.

Computers and Electronics

Computers and Electronics Penetration Testing Malware Advertising

Malware researcher reverse engineered a threat that went undetected for at least 2 years

Security Affairs

AUGUST 20, 2018

The popular malware researchers Marco Ramilli has analyzed a malware that remained under the radar for more than two years. The first thought that you might have as an experienced malware reverse engineer would be: “Ok, another bytecode reversing night, easy. Resource (a.k.a package in where it will be contextualized).

Engineering

Engineering Malware Computers and Electronics Penetration Testing

Analyzing the APT34’s Jason project

Security Affairs

JUNE 6, 2019

Security expert Marco Ramilli has analyzed the recently leaked APT34 hacking tool tracked as Jason – Exchange Mail BF. I am a computer security scientist with an intensive hacking background. I do have a MD in computer engineering and a PhD on computer security from University of Bologna.

Computers and Electronics

Computers and Electronics Penetration Testing DNS Passwords

University, Professional Certification or Direct Experience?

Security Affairs

SEPTEMBER 8, 2019

I am a computer security scientist with an intensive hacking background. I do have a MD in computer engineering and a PhD on computer security from University of Bologna. I do have experience on security testing since I have been performing penetration testing on several US electronic voting systems.

Computers and Electronics

Computers and Electronics Penetration Testing Education Cybersecurity

OilRig APT group: the evolution of attack techniques over time

Security Affairs

AUGUST 7, 2019

T1388) , from group_b to group_d time frames OilRig used real Compromised User Accountsextracted by Malware (rif. I am a computer security scientist with an intensive hacking background. I do have a MD in computer engineering and a PhD on computer security from University of Bologna. Exploit Technique Over Time.

Computers and Electronics

Computers and Electronics Penetration Testing DNS Phishing

TA505 Cybercrime targets system integrator companies

Security Affairs

NOVEMBER 12, 2019

The two Macros decoded a Javascript payload acting as a drop and execute by using a well-known strategy as described in: “ Frequent VBA Macros used in Office Malware ”. The TA505 group , that is known to have operated both the Dridex and Locky malware families, continues to make small changes to its operations. 66.133.129.5)

Cybercrime

Cybercrime Computers and Electronics Penetration Testing Malware

Writing Your First Bootloader for Better Analyses

Security Affairs

SEPTEMBER 3, 2019

Marco Ramilli explained MBR works and how is it possible to write a bootloader program, this skill will help you to analyze next BootLoader Malware. From time to time we might observe special Malware storing themselves into a MBR and run during the booting process. SecurityAffairs – malware, bootloader ). Pierluigi Paganini.

Computers and Electronics

Computers and Electronics Penetration Testing Malware Advertising

Free Tools: spotting APTs through Malware streams

Security Affairs

MARCH 25, 2019

Cyber security expert and founder of Yoroi has published a new tool that could be used to spot APTs (A dvanced Persistent Threats) through Malware streams. Today I’d like to share a little bit of my personal experience on spotting APTs through Malware streams. I am a computer security scientist with an intensive hacking background.

Malware

Malware Computers and Electronics Penetration Testing Advertising

Attack of drones: airborne cybersecurity nightmare

Security Affairs

DECEMBER 2, 2022

Drones currently occupy a unique legal position as they are classified as both aircraft and networked computing devices. Let’s overview common tools or platforms built specifically to hack drones and see how some of these may assist cybersecurity applications in real world scenarios. Market overview. Dronesploit.

Cybersecurity

Cybersecurity Wireless Computers and Electronics Penetration Testing

Cyber Threats Observatory Gets Improvements

Security Affairs

MAY 3, 2020

The main improvement sees the introduction of clustering stereotypes for each tracked malware family in three different behaviors: Domains , Files and Processes. According to shared information, the Cyber Threats Observatory Dashboard is composed by the following sections: Malware Families Trends. Malware Families. Stereotypes.

Cyber threats

Cyber threats Computers and Electronics Malware Penetration Testing

Top Cybersecurity Accounts to Follow on Twitter

eSecurity Planet

DECEMBER 3, 2021

Shah provides her expertise in hacking, software development, and kernel development and advocates for open source initiatives. Shah provides her expertise in hacking, software development, and kernel development and advocates for open source initiatives. Brian Krebs | @briankrebs. — Dave Kennedy (@HackingDave) July 15, 2020.

Accountability

Accountability Cybersecurity Penetration Testing InfoSec

Hacking The Hacker. Stopping a big botnet targeting USA, Canada and Italy

Security Affairs

AUGUST 31, 2018

In other words: from a simple “Malware Sample” to “Pwn the Attacker Infrastructure” NB: Federal Police have already been alerted on such a topic as well as National and International CERTs/CSIRT (on August 26/27 2018). I am a computer security scientist with an intensive hacking background.

Hacking

Hacking Computers and Electronics Penetration Testing Engineering

The ‘MartyMcFly’ investigation: Italian naval industry under attack

Security Affairs

NOVEMBER 14, 2018

Experts at Yoroi’s Cyber Security Defence Center along with Fincantieri’s security team investigated the recently discovered Martymcfly malware attacks. command and control services of info stealers malware). I am a computer security scientist with an intensive hacking background. Background. Edited by Pierluigi Paganini.

Computers and Electronics

Computers and Electronics Penetration Testing Malware Phishing

The evolutions of APT28 attacks

Security Affairs

DECEMBER 4, 2019

On one hand the delivery vector is often the only (or the first) artifact (such as: a Malware, a Link or exploit kit usage) that the cybersecurity analyst could observe. Since the main findings that I had analyzed for this post are Malware based, it makes sense to talk about Installation rather than talking about persistence.

Computers and Electronics

Computers and Electronics Penetration Testing Technology Malware

Is APT27 Abusing COVID-19 To Attack People ?!

Security Affairs

MARCH 19, 2020

Today, many reports are describing how infamous attackers are abusing such an emergency time to lure people by sending thematic email campaigns or by using thematic IM within Malware or Phishing links. Hackers taking advantage of COVID-19 to spread malware New COVID-19-themed malspam campaign delivers FormBook Malware.

Computers and Electronics

Computers and Electronics Penetration Testing Malware Cyber Attacks

APT34: Glimpse project

Security Affairs

MAY 2, 2019

I am a computer security scientist with an intensive hacking background. I do have a MD in computer engineering and a PhD on computer security from University of Bologna. I do have experience on security testing since I have been performing penetration testing on several US electronic voting systems.

DNS

DNS Computers and Electronics Penetration Testing Government

Similarities and differences between MuddyWater and APT34

Security Affairs

JUNE 26, 2019

I am a computer security scientist with an intensive hacking background. I do have a MD in computer engineering and a PhD on computer security from University of Bologna. I do have experience on security testing since I have been performing penetration testing on several US electronic voting systems.

Computers and Electronics

Computers and Electronics Penetration Testing Advertising Technology

Iranian Threat Actors: Preliminary Analysis

Security Affairs

JANUARY 15, 2020

Bonupdater, Helminth, Quadangent and PowRuner are some of the most sophisticated Malware attributed to OilRig and analyzed over the past few years. APT33 showed destruction intents by using Malware such as shamoon and stoneDrill , while Muddy mostly wants to “ backdooring ” the victims. CopyKittens.

Computers and Electronics

Computers and Electronics Penetration Testing Malware Government

Iran-linked APT34: Analyzing the webmask project

Security Affairs

APRIL 23, 2019

I am a computer security scientist with an intensive hacking background. I do have a MD in computer engineering and a PhD on computer security from University of Bologna. I do have experience on security testing since I have been performing penetration testing on several US electronic voting systems.

DNS

DNS Computers and Electronics Penetration Testing Government

Cyber CEO: The History Of Cybercrime, From 1834 To Present

Herjavec Group

AUGUST 26, 2021

1834 — French Telegraph System — A pair of thieves hack the French Telegraph System and steal financial market information, effectively conducting the world’s first cyberattack. 1870 — Switchboard Hack — A teenager hired as a switchboard operator is able to disconnect and redirect calls and use the line for personal usage. .

Cybercrime

Cybercrime Computers and Electronics Banking Hacking

Cyber Security Informer

Security expert Marco Ramilli released for free the Malware Hunter tool

Using Microsoft Powerpoint as Malware Dropper

Trending Sources

Malware Training Sets: FollowUP

Free Tool: Honey Feed

Sustes Malware: CPU for Monero

MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry

Writing Your First Bootloader for Better Analyses

Scraping the TOR for rare contents

From Targeted Attack to Untargeted Attack

Frequent VBA Macros used in Office Malware

Crimeware and financial cyberthreats in 2023

Step By Step Office Dropper Dissection

Is Emotet gang targeting companies with external SOC?

Malware researcher reverse engineered a threat that went undetected for at least 2 years

Analyzing the APT34’s Jason project

University, Professional Certification or Direct Experience?

OilRig APT group: the evolution of attack techniques over time

TA505 Cybercrime targets system integrator companies

Writing Your First Bootloader for Better Analyses

Free Tools: spotting APTs through Malware streams

Attack of drones: airborne cybersecurity nightmare

Cyber Threats Observatory Gets Improvements

Top Cybersecurity Accounts to Follow on Twitter

Hacking The Hacker. Stopping a big botnet targeting USA, Canada and Italy

The ‘MartyMcFly’ investigation: Italian naval industry under attack

The evolutions of APT28 attacks

Is APT27 Abusing COVID-19 To Attack People ?!

APT34: Glimpse project

Similarities and differences between MuddyWater and APT34

Iranian Threat Actors: Preliminary Analysis

Iran-linked APT34: Analyzing the webmask project

Cyber CEO: The History Of Cybercrime, From 1834 To Present

Stay Connected