New AMSI lifetime bypass, it works by searching for the first byte of each instruction to prevent updates from affecting it, Check it out.
#amsi #redteam #cybersecurity
https://github.com/ZeroMemoryEx/Amsi-Killer
🗣ZeroMemoryEx


🎖@malwr

It's About Time - Timestamp Changes in Windows 11
Good morning,

This episode was originally scheduled for release last month, but the new Windows 11 program execution artifact was a bit more timely and took its place. This episode covers a lot of fundamental Windows timestamp knowledge, plus some important timestamp changes in recent versions of Windows.

Watch Here: https://www.youtube.com/watch?v=c7eUibpy\_XM

For a complete 13Cubed Episode Guide, check out 13cubed.com/episodes.

For even more in-depth content, check out the first official 13Cubed Training Course at **training.13cubed.com**.
🗣13Cubed

Nice!
👤CandidTill6


🎖@malwr

Evasion-Escaper: Evasion Escaper is a project aimed at evading the checks that malicious software performs to detect if it's running in a virtual environment or sandbox, and to pass all such checks successfully.
🗣digicat

An interesting blog from the link you shared. Thanks for posting!
👤LeftOnQuietRoad


🎖@malwr

The VB Conference is a great place to share your research with the security community. Submit your proposals for papers by 5 April for a chance to be part of one of the longest running security conferences in the world. #'vb2023 https://www.virusbulletin.com/conference/vb2023/call-papers/
🗣virusbtn


🎖@malwr

BlackBerry has posted a report on a new APT-C-36 (also known as Blind Eagle) campaign, where the threat actor impersonated a Colombian government tax agency to target key industries in Colombia. https://blogs.blackberry.com/en/2023/02/blind-eagle-apt-c-36-targets-colombia
🗣virusbtn


🎖@malwr