iOS exploit chain deploys “LightSpy” feature-rich malware (same campaign as Operation Poisoned News: Hong Kong Users Targeted With Mobile Malware via Local News Links)
🗣digicat
🎖@malwr
🗣digicat
🎖@malwr
Securelist
iOS exploit chain deploys LightSpy feature-rich malware
A watering hole was discovered on January 10, 2020 utilizing a full remote iOS exploit chain to deploy a feature-rich implant named LightSpy.
Hacker Mails Best Buy Gift Card Offer to Trick Victim into Plugging in Malicious USB Thumb Drive
🗣andyholla84
🎖@malwr
🗣andyholla84
🎖@malwr
PCMAG
PSA: If You Get a 'Best Buy Gift Card' on a USB Drive in the Mail, Don't Plug It Into Your PC
Trustwave has uncovered an incident where a hacker mailed a malicious USB stick to a victim on the pretense the thumb drive was part of a Best Buy gift card offer. In reality, the thumb drive was full of malware.
Fitz Roy: a free solo climbing to sanitize virtual machines
🗣vilethan3773
Fitz Roy monitorizes Linux guests filesystems (raw, qcow2, vmdk , vdi, vpc, vhd) relying on libguestfs and Virustotal's API. Libguestfs mounts virtual machine filesystem and uploads suspicious files to Virustotal's API which are then analyzed.
🎖@malwr
🗣vilethan3773
Fitz Roy monitorizes Linux guests filesystems (raw, qcow2, vmdk , vdi, vpc, vhd) relying on libguestfs and Virustotal's API. Libguestfs mounts virtual machine filesystem and uploads suspicious files to Virustotal's API which are then analyzed.
🎖@malwr
GitLab
Luis Fueris / Fitz Roy
Fitz Roy monitorizes Linux guests filesystems (raw, qcow2, vmdk , vdi, vpc, vhd) relying on libguestfs and Virustotal's API. Libguestfs mounts virtual machine filesystem and uploads suspicious files...
When Mac has gone to hibernate/safe sleep can memory still be gathered?
If a MacBook Pro goes into hibernation mode can the ram still be acquired? The laptop is encrypted FV2 APFS...I’m guessing the ram would be written to disk and only FileVault password could cause the data to be written back to them ram...
🗣Lackluster123
Are you asking "can it be recovered after it wakes up?"
Or "can it be recovered while it's in that state?"
The answer to the first one is yes, and the second one is "not with any tool I've ever heard of."
👤Cypher_Blue
🎖@malwr
If a MacBook Pro goes into hibernation mode can the ram still be acquired? The laptop is encrypted FV2 APFS...I’m guessing the ram would be written to disk and only FileVault password could cause the data to be written back to them ram...
🗣Lackluster123
Are you asking "can it be recovered after it wakes up?"
Or "can it be recovered while it's in that state?"
The answer to the first one is yes, and the second one is "not with any tool I've ever heard of."
👤Cypher_Blue
🎖@malwr
reddit
When Mac has gone to hibernate/safe sleep can memory still be...
If a MacBook Pro goes into hibernation mode can the ram still be acquired? The laptop is encrypted FV2 APFS...I’m guessing the ram would be...
A Deep Dive Into CVE-2020-0729: Remote Code Execution Through Windows .LNK Files
🗣RedmondSecGnome
🎖@malwr
🗣RedmondSecGnome
🎖@malwr
Zero Day Initiative
Zero Day Initiative — CVE-2020-0729: Remote Code Execution Through .LNK Files
In this excerpt of a Trend Micro Vulnerability Research Service vulnerability report, John Simpson and Pengsu Cheng of the Trend Micro Research Team detail a recent remote code execution bug in Microsoft Windows .LNK files. The following is a portion of their…
PCode Disasm - VB6 For Loops
🗣dz3212
Wow. This is so cool!!! When do you plan to release this? I tried to find the WKTVB Debugger source code and use it, however, I don't have any idea how VB6 Pcode debugger works.
👤ismael_akez
🎖@malwr
🗣dz3212
Wow. This is so cool!!! When do you plan to release this? I tried to find the WKTVB Debugger source code and use it, however, I don't have any idea how VB6 Pcode debugger works.
👤ismael_akez
🎖@malwr
YouTube
Vb6 Pcode For Loops Disasm
Looking at how VB6 PCode For Loops work in disassembler and debugger
Micropatching Unknown 0days in Windows Type 1 Font Parsing
🗣dielel
so this micropatching thing... why do that as opposed to relying only on the official Microsoft patches? pros/cons?
👤PotatOS_Cannon
🎖@malwr
🗣dielel
so this micropatching thing... why do that as opposed to relying only on the official Microsoft patches? pros/cons?
👤PotatOS_Cannon
🎖@malwr
0patch - Better Security Patches
Micropatching Unknown 0days in Windows Type 1 Font Parsing
Tiny reboot-less security patches for critical vulnerabilities in Windows, Microsoft Office, and other Windows products
