A Video Demonstration on Cracking a GSM Capture File https://www.rtl-sdr.com/a-video-demonstration-on-cracking-a-gsm-capture-file/
🗣rtlsdrblog


🎖@malwr

Check Point researchers analyse the TinyNote backdoor associated with the Camaro Dragon cluster of activity. This Go-based backdoor is distributed with names related to foreign affairs matters, and likely targets Southeast and East Asian embassies. https://research.checkpoint.com/2023/malware-spotlight-camaro-dragons-tinynote-backdoor/
🗣virusbtn


🎖@malwr

LightsOut - generates an obfuscated DLL that will disable AMSI & ETW while trying to evade AV:

https://github.com/icyguider/LightsOut
🗣VessOnSecurity


🎖@malwr

SonicWall researchers recently observed a new variant of GuLoader. They look at unpacking its shellcodes, a new anti-debug technique it deploys, and its custom Vectored Exception Handler. https://securitynews.sonicwall.com/xmlpost/guloader-demystified-unraveling-its-vectored-exception-handler-approach/
🗣virusbtn


🎖@malwr

DEV-0569 finds new ways to deliver Royal ransomware, various payloads | Microsoft Security Blog https://www.microsoft.com/en-us/security/blog/2022/11/17/dev-0569-finds-new-ways-to-deliver-royal-ransomware-various-payloads/
🗣akaclandestine


🎖@malwr

fq: jq for binary formats - tool, language and decoders for working with binary and text formats
⭐️ 6243
Author: @mwader
#golang
https://github.com/wader/fq
🗣GolangRepos


🎖@malwr

The first release candidate for dnSpyEx 6.4.0 has been released featuring many improvements and bug fixes!

Changelog and download can be found here:
https://github.com/dnSpyEx/dnSpy/releases/tag/v6.4.0-rc1
🗣elektrokilldev


🎖@malwr

The Windows Process Journey — conhost.exe (Console Window Host)

https://medium.com/@boutnaru/the-windows-process-journey-conhost-exe-console-window-host-f03f8db35574

#Windows #Microsoft #conhost #cmd #CLI #SBOM #DFIR #Learning #Forensics #IT #Tech #security #infosec #DevOps #DevSecOps #Console #TheWindowsProcessJourney
🗣boutnaru


🎖@malwr

Seeing more malware using binary padding for evasion and obfuscation?

Intezer security researcher @MhicRoibin explains how and why threat actors are inflating malware files with junk data, plus what you can do about it: https://hubs.li/Q01RRkPP0
🗣IntezerLabs


🎖@malwr

Zscaler's Mallikarjun Piddannavar presents a technical analysis of a new info stealer called Bandit Stealer, which has been marketed and sold as a service on underground criminal forums since April 2023. https://www.zscaler.com/blogs/security-research/technical-analysis-bandit-stealer
🗣virusbtn


🎖@malwr

CatSniffer is an original multiprotocol,& multiband board made for sniffing, communicating,& attacking IoT devices. That integrates the new chips CC1352, SX1262,& SAMD21E17 (Sub 1GHz & 2.4GHz).

https://github.com/ElectronicCats/CatSniffer

#SoftwareDefinedRAdio #SDR
#LoRa #LoRaWAN
#BLE #ZigBee
🗣giammaiot2


🎖@malwr

In a new blog post Trend Micro researchers discuss the latest TargetCompany ransomware variant, Xollam, and the new initial access technique it uses. https://www.trendmicro.com/en_us/research/23/f/xollam-the-latest-face-of-targetcompany.html
🗣virusbtn


🎖@malwr

A collection of bookmarks for penetration testers, bug bounty hunters, malware developers, reverse engineers and anyone who is just interested in infosec topics.

https://github.com/kargisimos/offensive-bookmarks
🗣Dinosn


🎖@malwr

[BLOG]
Bypassing Defender with ThreatCheck & Ghidra

https://offensivedefence.co.uk/posts/threatcheck-ghidra/
🗣_RastaMouse


🎖@malwr

strings2 - Extract strings from binary files and process memory https://github.com/glmcdona/strings2
🗣reverseame


🎖@malwr

For those who are encountering Golang malware (which are likely to be more and more of you as they language gains in popularity): the Ghidra scripts I made to help analyse Golang binaries in Ghidra are now public, along with a corporate blog diving into the details. The code itself is (if I may say so myself) very well documented. As such, if you push you Java hate aside, it's a knowledge base in and on its own.

Blog: https://www.trellix.com/en-us/about/newsroom/stories/research/feeding-gophers-to-ghidra.html

GitHub: https://github.com/advanced-threat-research/GhidraScripts

ℹ️ Sent from one of our channel members

🎖@malwr

RedLine Technical Analysis Report

https://apophis133.medium.com/redline-technical-analysis-report-5034e16ad152

ℹ️ Sent from one of our channel members

🎖@malwr