Deep Dive Into TrickBot Executor Module "mexec": Hidden "Anchor" Bot Nexus Operations - SentinelLabs
🗣digicat
🎖@malwr
🗣digicat
🎖@malwr
SentinelLabs
Deep Dive Into TrickBot Executor Module "mexec": Hidden "Anchor" Bot Nexus Operations - SentinelLabs
New "mexec" module delivers tertiary malware and allows TrickBot to pivot within a network, deploy a variety of payloads and evade common detection methods.
[The Red Team Guide Chapter 21: ATTACKING ICS/SCADA](https://www.peerlyst.com/posts/the-red-team-guide-chapter-21-attacking-ics-scada-mike-art-rebultan-mit-ceh-ecsa)
🗣cyberg0100
🎖@malwr
🗣cyberg0100
🎖@malwr
Peerlyst
[The Red Team Guide] Chapter 21: ATTACKING ICS/SCADA
INTRODUCTION
Just like any other organization, ICS/SCADA is not free from cybersecurity attacks. In fact, this is the most dangerous among other compared to others. It does not just damage the organization's reputation or implicates financial imp..
Just like any other organization, ICS/SCADA is not free from cybersecurity attacks. In fact, this is the most dangerous among other compared to others. It does not just damage the organization's reputation or implicates financial imp..
A Hacker’s Guide To JTAG (2020) [HARDWARE HACKING](https://hackaday.com/2020/04/08/a-hackers-guide-to-jtag/)
🗣VOIDPCB
Awesome
👤digi_thief
🎖@malwr
🗣VOIDPCB
Awesome
👤digi_thief
🎖@malwr
Hackaday
A Hacker’s Guide To JTAG
If you’re reading Hackaday, you’ve almost certainly heard of JTAG. There’s an excellent chance you’ve even used it once or twice to reflash an unruly piece of hardware. But …
BlackBerry Report Examines Decade-Long Compromise of Linux Servers by Chinese APTs
🗣jack123451
🎖@malwr
🗣jack123451
🎖@malwr
Blackberry
BlackBerry Report Examines Decade-Long Compromise of Linux Servers by Chinese APTs
BlackBerry Limited today released new research that examines how five related Advanced Persistent Threat (APT) groups operating in the interest of the Chinese government have systematically targeted Linux servers, Windows systems and mobile devices running…
Windows 10 is getting Linux files integration in File Explorer
🗣Haziq12345
Ah darn, got my hopes up for a bit.
The title made me think Windows was getting ext support, but it's just some stupid WSL thing.
👤Valley6660
🎖@malwr
🗣Haziq12345
Ah darn, got my hopes up for a bit.
The title made me think Windows was getting ext support, but it's just some stupid WSL thing.
👤Valley6660
🎖@malwr
The Verge
Windows 10 is getting Linux files integration in File Explorer
Microsoft embraces Linux further in Windows 10.
InfoSec Oasis - Free VR (Optional) InfoSec Conference April 18th
Hey, NetSec! Excuse the formatting, (Not a Reddit power user). I have been working on creating a free online conference scheduled for April 18th. The goal is to try to bring us all together virtually to learn and mingle in a time where we can't physically be together. The conference is free, the platform is free, and again, you don't need VR to join in. We hope this will bring some excitement to everyone who is stuck at home during this rough time.
If you are planning on coming, please take the time to RSVP so that we have an accurate count for the AltSpace/Microsoft people. We have a great speaker lineup so far (including Lesley Carhart, Dave Kennedy, Alyssa Miller, Neil "Grifter" Wyler, Jayson Street, and Frank "The Tank" Diaz), and will be releasing the second track soon. Hope to see you all there! More details at the website: https://infosecoasis.com/
🗣TheActualRapture
🎖@malwr
Hey, NetSec! Excuse the formatting, (Not a Reddit power user). I have been working on creating a free online conference scheduled for April 18th. The goal is to try to bring us all together virtually to learn and mingle in a time where we can't physically be together. The conference is free, the platform is free, and again, you don't need VR to join in. We hope this will bring some excitement to everyone who is stuck at home during this rough time.
If you are planning on coming, please take the time to RSVP so that we have an accurate count for the AltSpace/Microsoft people. We have a great speaker lineup so far (including Lesley Carhart, Dave Kennedy, Alyssa Miller, Neil "Grifter" Wyler, Jayson Street, and Frank "The Tank" Diaz), and will be releasing the second track soon. Hope to see you all there! More details at the website: https://infosecoasis.com/
🗣TheActualRapture
🎖@malwr
Infosecoasis
InfoSec OASIS
InfoSecOASIS is an information security conference to be held in Virtual Reality on April 18. It is focused on information sharing and facilitating social interaction for those in isolation due to COVID-19.
Sandboxie Open Source Code is available for download
🗣Im_Special
https://github.com/DavidXanatos/Sandboxie
👤meepiquitous
Good on them for releasing the source code before discontinuing it
👤momobozo
Great! You have to sign the driver though
👤Holnapra
🎖@malwr
🗣Im_Special
https://github.com/DavidXanatos/Sandboxie
👤meepiquitous
Good on them for releasing the source code before discontinuing it
👤momobozo
Great! You have to sign the driver though
👤Holnapra
🎖@malwr
GitHub
GitHub - sandboxie-plus/Sandboxie: Sandboxie Plus & Classic
Sandboxie Plus & Classic. Contribute to sandboxie-plus/Sandboxie development by creating an account on GitHub.
[PDF Building Secure and Reliable Systems by Google](https://landing.google.com/sre/static/pdf/SRS.pdf)
🗣digicat
🎖@malwr
🗣digicat
🎖@malwr
[PDF Report: Decade of the RATs Novel Cross-Platform APT Attacks Targeting Linux, Windows and Android](https://www.blackberry.com/content/dam/blackberry-com/asset/enterprise/pdf/direct/report-bb-decade-of-the-rats.pdf)
🗣digicat
🎖@malwr
🗣digicat
🎖@malwr
Android Stalkerware Tear Down
I spent a weekend recently decompiling and analyzing a piece of Stalkerware called "Mobile Tracker Free".
One thing I've always found interesting about Stalkerware and mobile malware is the way they obtain access to messages stored on the device. Grabbing the WhatsApp messagestore.db isn't an easy feat for a mobile app on a non-rooted Android device. It was interesting to analyze the code (some included in the screenshot) to see how they did it. It was even more interesting to watch them chmod 777 the messagestore.db before sending it back to their servers.
If you're interested, my full write up is in the link below:
https://traced.app/2020/02/22/in-the-wild-stalkerware-analysis-mobile-tracker-free/
Any questions, please just ask. :)
🗣Mattboddy47
🎖@malwr
I spent a weekend recently decompiling and analyzing a piece of Stalkerware called "Mobile Tracker Free".
One thing I've always found interesting about Stalkerware and mobile malware is the way they obtain access to messages stored on the device. Grabbing the WhatsApp messagestore.db isn't an easy feat for a mobile app on a non-rooted Android device. It was interesting to analyze the code (some included in the screenshot) to see how they did it. It was even more interesting to watch them chmod 777 the messagestore.db before sending it back to their servers.
If you're interested, my full write up is in the link below:
https://traced.app/2020/02/22/in-the-wild-stalkerware-analysis-mobile-tracker-free/
Any questions, please just ask. :)
🗣Mattboddy47
🎖@malwr
Trustd Mobile
New Stalkerware 'Mobile Tracker Free' Targets Victims
How Mobile Tracker free stalkerware works, how to detect it and how to remove it.