Detecting Hidden Backdoors in PHP OPcache
2016-05-27
In this article, we will be looking at the strategies to detect and analyze malware hidden inside an OPcache file. If you haven’t read our previous article about hiding aRead More →
SWIFT Bank Attacks Connected to North Korean Group Behind Sony Hacks
2016-05-27
Bank in Philippines was also targeted by attackers, whose malware shares code with tools used by Lazarus group. Symantec has found evidence that a bank in the Philippines has alsoRead More →
USERLAND PERSISTENCE WITH SCHEDULED TASKS AND COM HANDLER HIJACKING
2016-05-26
A while back I was exploring userland COM and stumbled across some 2011 research by Jon Larimer explaining the dangers of per-user COM objects. Recently Casey Smith (@subtee)started digging intoRead More →
Next-gen Tor to use distributed RNG, 55-character addresses
2016-05-25
Numbers so random no one can predict how random they’ll be. The Tor project has cooked up a new way to generate random numbers to help secure its next-generation onion router.Read More →
Pastejacking Attack Overrides Your Clipboard to Trick You into Running Evil Code
2016-05-25
Copy-pasting commands into your terminal allows attackers to append, automatically execute and then hide malicious code. This type of attack is known as clipboard hijacking, and in most scenarios, itRead More →
WPAD Protocol Bug Puts Windows Users at Risk
2016-05-25
WPAD name collision issue can lead to MitM attacks. US-CERT has issued a public alert after researchers from the University of Michigan and Verisign Labs discovered a method of leveraging theRead More →
Operation Ke3chang Resurfaces With New TidePool Malware
2016-05-25
Little has been published on the threat actors responsible for Operation Ke3chang since the report was released more than two years ago. However, Unit 42 has recently discovered the actorsRead More →
Linux Kernel Website Kernel.org Banned By Norton
2016-05-24
Short Bytes: Symantec’s automated threat analysis system, Norton Safe Web, claims that Linux kernel’s website kernel.org contains 4 threats and shows a red flag to the users. Looking at Norton’sRead More →
TARGETED ATTACKS AGAINST BANKS IN THE MIDDLE EAST
2016-05-24
In the first week of May 2016, FireEye’s DTI identified a wave of emails containing malicious attachments being sent to multiple banks in the Middle East region. The threat actorsRead More →
Who’s hacking schools now? The students
2016-05-21
The cyberattack that knocked hundreds of school networks offline in Japan last week had at least one novel feature: It was allegedly instigated by a student. A 16-year-old high schoolRead More →
