Tags → #malware analysis

Threats
Analysis of Malware Obfuscation Techniques and Python Script
Nov 22, 2024 Xavier Mertens' article examines the obfuscation techniques used by malware developers, focusing on a malicious Python script that targets mnemonic phrases related to cryptocurrency wallets.
Threats
APT-K-47 Group Linked to Sophisticated Cyber Attack Campaign
Nov 22, 2024 The Knownsec 404 Advanced Threat Intelligence team has reported a sophisticated attack campaign attributed to the APT-K-47 organization, which utilizes social engineering tactics related to "Hajj" to compromise systems.
Threats
Earth Kasha Malware Attacks Target Japan, Taiwan, and India
Nov 22, 2024 Earth Kasha, a cyber threat actor, has been linked to a series of sophisticated malware attacks targeting organizations in Japan, Taiwan, and India, utilizing advanced techniques and evolving malware such as LODEINFO and NOOPDOOR.
Threats
Comparison of VenomRAT and AsyncRAT in Cybersecurity
Nov 21, 2024 Remote Access Tools (RATs), such as VenomRAT and AsyncRAT, are utilized by cyber attackers for unauthorized system control, with distinct differences in their capabilities and detection methods.
Threats
Cybersecurity Incident Involves LevelBlue's MDR Security Operations Center
Nov 21, 2024 A cybersecurity incident involving LevelBlue's Managed Detection and Response (MDR) Security Operations Center has underscored the importance of monitoring persistence mechanisms, following the detection of a potentially unwanted application that utilized suspicious registry keys and scheduled tasks.
Threats
ESET Identifies Linux Backdoor Linked to Gelsemium APT Group
Nov 21, 2024 ESET researchers have identified multiple samples of a Linux backdoor named WolfsBane, attributed to the Gelsemium APT group, marking the first public report of their use of Linux malware.
Threats
Monitoring of Gabagool Phishing Campaign Targeting Employees
Nov 20, 2024 The TRAC Labs team is monitoring a sophisticated phishing campaign named Gabagool, which targets corporate and government employees by utilizing Cloudflare R2 buckets to host malicious content.
Threats
New XenoRAT Sample Targets Gamers Using Excel File
Nov 20, 2024 Researchers have discovered a new sample of XenoRAT, a remote access tool targeting gamers, which employs an Excel XLL file for delivery and indicates a shift towards enterprise network targeting.
Threats
NSHC Threat Research Lab Reports on Cyber Threat Actor Activities
Nov 20, 2024 The NSHC Threat Research Lab's report identifies 47 Threat Actor Groups and analyzes their activities, primarily targeting the finance and government sectors between August 21 and September 20, 2024.
Threats
Analysis of Raspberry Robin Malware's Functionality and Techniques
Nov 19, 2024 Raspberry Robin is a complex malware that employs advanced execution layers and obfuscation techniques to evade detection and perform malicious activities.