JPCERT/CC's Yuma Masubuchi provides details of an attack targeting Linux routers with the GobRAT malware. The attacker initially targets a router with WEBUI open to the public, executes scripts possibly by using vulnerabilities, & finally executes GobRAT. https://blogs.jpcert.or.jp/en/2023/05/gobrat.html
🗣virusbtn


🎖@malwr

Trend Micro's Sarah Pearl Camiling & Paul John Bardon write about a new Go-based information-stealing malware named Bandit Stealer, which targets numerous browsers and cryptocurrency wallets while evading detection. https://www.trendmicro.com/en_us/research/23/e/new-info-stealer-bandit-stealer-targets-browsers-wallets.html
🗣virusbtn


🎖@malwr

WinDiff - Browse and compare exports, debug symbols and debug types of PEs between Windows versions.

WinDiff is a streamlined revamp of ntdiff, wired directly to Winbindex to fetch Windows updates and PEs automatically.

App: https://windiff.vercel.app
Repo: https://github.com/ergrelet/windiff
🗣ergrelet


🎖@malwr

Find out the IP address through a call to Telegram… https://medium.com/@ibederov_en/find-out-the-ip-address-through-a-call-to-telegram-a899441b1bac #Pentesting #CyberSecurity #Infosec
🗣ptracesecurity


🎖@malwr

Let's get started with function flowcharts with IDAPython (part 1). https://youtu.be/omzxE6OoBVk
🗣allthingsida


🎖@malwr

Websites to Scan Files for Viruses

1. http://Avira.com
2. http://VirusTotal.com
3. http://opentip.kaspersky.com
4. http://FortiGuard.com
5. http://Virusscan.jotti.org
🗣SecurityTrybe


🎖@malwr

Learning Resources with Labs For Offensive Security Players. https://github.com/Zeyad-Azima/Offensive-Resources
🗣Dinosn


🎖@malwr

A Video Demonstration on Cracking a GSM Capture File https://www.rtl-sdr.com/a-video-demonstration-on-cracking-a-gsm-capture-file/
🗣rtlsdrblog


🎖@malwr

Check Point researchers analyse the TinyNote backdoor associated with the Camaro Dragon cluster of activity. This Go-based backdoor is distributed with names related to foreign affairs matters, and likely targets Southeast and East Asian embassies. https://research.checkpoint.com/2023/malware-spotlight-camaro-dragons-tinynote-backdoor/
🗣virusbtn


🎖@malwr

LightsOut - generates an obfuscated DLL that will disable AMSI & ETW while trying to evade AV:

https://github.com/icyguider/LightsOut
🗣VessOnSecurity


🎖@malwr

SonicWall researchers recently observed a new variant of GuLoader. They look at unpacking its shellcodes, a new anti-debug technique it deploys, and its custom Vectored Exception Handler. https://securitynews.sonicwall.com/xmlpost/guloader-demystified-unraveling-its-vectored-exception-handler-approach/
🗣virusbtn


🎖@malwr

DEV-0569 finds new ways to deliver Royal ransomware, various payloads | Microsoft Security Blog https://www.microsoft.com/en-us/security/blog/2022/11/17/dev-0569-finds-new-ways-to-deliver-royal-ransomware-various-payloads/
🗣akaclandestine


🎖@malwr

fq: jq for binary formats - tool, language and decoders for working with binary and text formats
⭐️ 6243
Author: @mwader
#golang
https://github.com/wader/fq
🗣GolangRepos


🎖@malwr

The first release candidate for dnSpyEx 6.4.0 has been released featuring many improvements and bug fixes!

Changelog and download can be found here:
https://github.com/dnSpyEx/dnSpy/releases/tag/v6.4.0-rc1
🗣elektrokilldev


🎖@malwr

The Windows Process Journey — conhost.exe (Console Window Host)

https://medium.com/@boutnaru/the-windows-process-journey-conhost-exe-console-window-host-f03f8db35574

#Windows #Microsoft #conhost #cmd #CLI #SBOM #DFIR #Learning #Forensics #IT #Tech #security #infosec #DevOps #DevSecOps #Console #TheWindowsProcessJourney
🗣boutnaru


🎖@malwr

Seeing more malware using binary padding for evasion and obfuscation?

Intezer security researcher @MhicRoibin explains how and why threat actors are inflating malware files with junk data, plus what you can do about it: https://hubs.li/Q01RRkPP0
🗣IntezerLabs


🎖@malwr

Zscaler's Mallikarjun Piddannavar presents a technical analysis of a new info stealer called Bandit Stealer, which has been marketed and sold as a service on underground criminal forums since April 2023. https://www.zscaler.com/blogs/security-research/technical-analysis-bandit-stealer
🗣virusbtn


🎖@malwr