Exposing Modern Client-Side Exploits Serving Kits – An AV and Snort IDS MD5 List Compilation – Part Six

Dear blog readers,This is the sixth post part of my “Exposing Modern Client-Side Exploits Serving Kits – An AV and Snort IDS MD5 List Compilation – Part Five” blog post series where I intend to share actionable threat intelligence with vendors and orga… Continue reading Exposing Modern Client-Side Exploits Serving Kits – An AV and Snort IDS MD5 List Compilation – Part Six

Exposing Modern Client-Side Exploits Serving Kits – An AV and Snort IDS MD5 List Compilation – Part Five

Dear blog readers,This is the fifth post part of my “Exposing Modern Client-Side Exploits Serving Kits – An AV and Snort IDS MD5 List Compilation – Part Four” blog post series where I intend to share actionable threat intelligence with vendors and orga… Continue reading Exposing Modern Client-Side Exploits Serving Kits – An AV and Snort IDS MD5 List Compilation – Part Five

Exposing Modern Client-Side Exploits Serving Kits – An AV and Snort IDS MD5 List Compilation – Part Four

Dear blog readers,This is the fourth post part of my “Exposing Modern Client-Side Exploits Serving Kits – An AV and Snort IDS MD5 List Compilation – Part Three” blog post series where I intend to share actionable threat intelligence with vendors and or… Continue reading Exposing Modern Client-Side Exploits Serving Kits – An AV and Snort IDS MD5 List Compilation – Part Four

Exposing Modern Client-Side Exploits Serving Kits – An AV and Snort IDS MD5 List Compilation – Part Three

Dear blog readers,This is the third post part of my “Exposing Modern Client-Side Exploits Serving Kits – An AV and Snort IDS MD5 List Compilation – Part Two” blog post series where I intend to share actionable threat intelligence with vendors and organ… Continue reading Exposing Modern Client-Side Exploits Serving Kits – An AV and Snort IDS MD5 List Compilation – Part Three

Exposing Modern Client-Side Exploits Serving Kits – An AV and Snort IDS MD5 List Compilation – Part Two

Dear blog readers,This is the second post part of the “Exposing Modern Client-Side Exploits Serving Kits – An AV and Snort IDS MD5 List Compilation” series where I intend to share actionable threat intelligence with vendors and organizations in the con… Continue reading Exposing Modern Client-Side Exploits Serving Kits – An AV and Snort IDS MD5 List Compilation – Part Two

Exposing Modern Client-Side Exploits Serving Kits – An AV and Snort IDS MD5 List Compilation

Dear blog readers,It’s been a while since I’ve last posted a quality update and I’ve decided to share with everyone the results of a recent initiative where I aim to provide actionable threat intelligence on some of the key client-side exploits serving… Continue reading Exposing Modern Client-Side Exploits Serving Kits – An AV and Snort IDS MD5 List Compilation

Encrochat “Bites the Dust”? Think Twice

Since when does law enforcement attacking a commercial encryption phone and software company constitute news? Keep reading.It appears that for a while the news was a buzz with law enforcement managing to obtain access to the primary domain that used to… Continue reading Encrochat “Bites the Dust”? Think Twice

From the “Definitely Malicious” Department – Exposing a CoolWebSearch Domains Portfolio

Remember CoolWebSearch? Check this out. This is definitely “from the malicious software department”. Sample CoolWebSearch domains portfolio known to have participated in various campaigns throughout the years:0-29.com0-2u.com0-days.net000info.com001sof… Continue reading From the “Definitely Malicious” Department – Exposing a CoolWebSearch Domains Portfolio

Sampling 419 Advance Fee Scams Activity – Part Three

Continuing the “Sampling 419 Advance Fee Scams Activity” series of blog posts I’ve decided to offer yet another peek inside their malicious and fraudulent activity and publish part three of the series.david_ikemba@supereme-loan-finance.com – 96.24.14.4… Continue reading Sampling 419 Advance Fee Scams Activity – Part Three

Exposing Emotet’s Modern Infrastructure – A Case Study on Tracking Down and Shutting Down Abusive Malware In Direct Cooperation with Abuse Departments

In this post I’ll officially attempt to bring down and take offline the Emotet botnet including to actually provide never-published before OSINT type of research analysis on the actual C&C infrastructure behind the Emotet botnet which is one of the… Continue reading Exposing Emotet’s Modern Infrastructure – A Case Study on Tracking Down and Shutting Down Abusive Malware In Direct Cooperation with Abuse Departments