[PDF Building Secure and Reliable Systems by Google](https://landing.google.com/sre/static/pdf/SRS.pdf)
๐ฃdigicat
๐@malwr
๐ฃdigicat
๐@malwr
[PDF Report: Decade of the RATs Novel Cross-Platform APT Attacks Targeting Linux, Windows and Android](https://www.blackberry.com/content/dam/blackberry-com/asset/enterprise/pdf/direct/report-bb-decade-of-the-rats.pdf)
๐ฃdigicat
๐@malwr
๐ฃdigicat
๐@malwr
Android Stalkerware Tear Down
I spent a weekend recently decompiling and analyzing a piece of Stalkerware called "Mobile Tracker Free".
One thing I've always found interesting about Stalkerware and mobile malware is the way they obtain access to messages stored on the device. Grabbing the WhatsApp messagestore.db isn't an easy feat for a mobile app on a non-rooted Android device. It was interesting to analyze the code (some included in the screenshot) to see how they did it. It was even more interesting to watch them chmod 777 the messagestore.db before sending it back to their servers.
If you're interested, my full write up is in the link below:
https://traced.app/2020/02/22/in-the-wild-stalkerware-analysis-mobile-tracker-free/
Any questions, please just ask. :)
๐ฃMattboddy47
๐@malwr
I spent a weekend recently decompiling and analyzing a piece of Stalkerware called "Mobile Tracker Free".
One thing I've always found interesting about Stalkerware and mobile malware is the way they obtain access to messages stored on the device. Grabbing the WhatsApp messagestore.db isn't an easy feat for a mobile app on a non-rooted Android device. It was interesting to analyze the code (some included in the screenshot) to see how they did it. It was even more interesting to watch them chmod 777 the messagestore.db before sending it back to their servers.
If you're interested, my full write up is in the link below:
https://traced.app/2020/02/22/in-the-wild-stalkerware-analysis-mobile-tracker-free/
Any questions, please just ask. :)
๐ฃMattboddy47
๐@malwr
Trustd Mobile
New Stalkerware 'Mobile Tracker Free' Targets Victims
How Mobile Tracker free stalkerware works, how to detect it and how to remove it.
BlackBerry: Chinese cybercriminals target high-value Linux servers with weak defenses
๐ฃcyberg0100
๐@malwr
๐ฃcyberg0100
๐@malwr
TechRepublic
BlackBerry: Chinese cybercriminals target high-value Linux servers with weak defenses
Five APT groups have been using remote access trojans to take advantage of a network component that doesn't get much attention from security teams.
Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting
๐ฃcyberg0100
๐@malwr
๐ฃcyberg0100
๐@malwr
GitHub
GitHub - hahwul/WebHackersWeapons: โ๏ธ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happyโฆ
โ๏ธ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting - hahwul/WebHackersWeapons
Deobfuscator mainly developed to deobfuscate XLM macros used in Zloader campaign.
๐ฃdigicat
๐@malwr
๐ฃdigicat
๐@malwr
GitHub
GitHub - DissectMalware/XLMMacroDeobfuscator: Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)
Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros) - DissectMalware/XLMMacroDeobfuscator
M.O of Crypto Extorsion Emails
Came across malicious #bitcoin transactions and done a deep dive to understand the M.O of threat actors. Here you go Short Research
๐ฃBhishmar
๐@malwr
Came across malicious #bitcoin transactions and done a deep dive to understand the M.O of threat actors. Here you go Short Research
๐ฃBhishmar
๐@malwr
Medium
Modus Operandi of CRYPTO-EXTORSION โ A Detailed Case Study
We have seen many use-cases of CryptoExtorsion in the form of Ransomware, Blackmail Emails, Sextortion Emails etc. All these methodsโฆ
Detect Ghost-In-The-Logs (when executed disables all ETW)
Sigma: https://github.com/Neo23x0/sigma/pull/704/files
Source: https://twitter.com/xknow\_infosec/status/1247932564293275650
๐ฃiveco_x
๐@malwr
Sigma: https://github.com/Neo23x0/sigma/pull/704/files
Source: https://twitter.com/xknow\_infosec/status/1247932564293275650
๐ฃiveco_x
๐@malwr
GitHub
Detect Ghost-In-The-Logs (disabling/bypassing ETW) by Iveco ยท Pull Request #704 ยท SigmaHQ/sigma
possible detections for Ghost-In-The-Logs
Free Pluralsight Technology Skills Video Courses
๐ฃangiec5408
No credit card is required if you sign up before May 1
Build in-demand tech skills without leaving your house. Get free access to 7,000+ expert-led video courses and more all month long.
New free accounts opened through April 30, 2020 will have access to Pluralsightโs library of video courses through April. Current active subscribers are not eligible for this promotion. Payment information will not be required for new free accounts opened through April 30, 2020. New free accounts opened after May 1, 2020, will only have access to a portion of Pluralsightโs library and will require payment information.
๐คangiec5408
๐@malwr
๐ฃangiec5408
No credit card is required if you sign up before May 1
Build in-demand tech skills without leaving your house. Get free access to 7,000+ expert-led video courses and more all month long.
New free accounts opened through April 30, 2020 will have access to Pluralsightโs library of video courses through April. Current active subscribers are not eligible for this promotion. Payment information will not be required for new free accounts opened through April 30, 2020. New free accounts opened after May 1, 2020, will only have access to a portion of Pluralsightโs library and will require payment information.
๐คangiec5408
๐@malwr
Pluralsight
Courses & Training for Individuals on an Online Learning Platform | Pluralsight
Advance your tech skills with Pluralsight, an online learning platform with expert-led courses, certifications, assessments and hands-on experiences.
The story of how I created a way to port Windows Apps to Linux
๐ฃruidfigueiredo
You should take a look at AvaloniaUI for .NET, you can make native cross platform apps and it also should be easy to port from WPF.
๐คQuinnBorn
Why not just build your Electron app with native extensions?
Itโs not really a way to port Windows Apps itโs a way to turn Windows Apps into a server and make a whole new GUI in HTML.
๐คTinyCollection
So basically write a server in .NET, a client in javascript + html, bundle them together using electron, and use stdin/stdout for for communication instead of a proper RPC framework.
๐คrandom_lonewolf
๐@malwr
๐ฃruidfigueiredo
You should take a look at AvaloniaUI for .NET, you can make native cross platform apps and it also should be easy to port from WPF.
๐คQuinnBorn
Why not just build your Electron app with native extensions?
Itโs not really a way to port Windows Apps itโs a way to turn Windows Apps into a server and make a whole new GUI in HTML.
๐คTinyCollection
So basically write a server in .NET, a client in javascript + html, bundle them together using electron, and use stdin/stdout for for communication instead of a proper RPC framework.
๐คrandom_lonewolf
๐@malwr
The Blinking Caret
The story of how I created a way to port Windows Apps to Linux - The Blinking Caret
Some day during a weekend sometime around the summer in 2018 I was doing house chores while listening to a podcast. The podcast I was listening to is called Coder Radio, and I was specifically listening to episode #322 Not so QT. That episode is about usingโฆ