Collaborate Disseminate
Relentless in their methods, attackers will continue employing evasion tactics to circumvent traditional security measures.
The post Evasion Tactics Used By Cybercriminals To Fly Under The Radar appeared first on SecurityWeek.
Continue reading Evasion Tactics Used By Cybercriminals To Fly Under The Radar
I published the following diary on isc.sans.edu: “Malicious Python Code and LittleSnitch Detection“: We all run plenty of security tools on our endpoints. Their goal is to protect us by preventing infection (or trying to prevent it). But all those security tools are present on our devices like normal applications
The post [SANS ISC] Malicious Python Code and LittleSnitch Detection appeared first on /dev/random.
Continue reading [SANS ISC] Malicious Python Code and LittleSnitch Detection
I published the following diary on isc.sans.edu: “Sandbox Evasion Using NTP“: I’m still hunting for interesting (read: “malicious”) Python samples. By reading my previous diaries, you know that I like to find how attackers implement obfuscation and evasion techniques. Like yesterday, I found a Python sample that creates a thread
The post [SANS ISC] Sandbox Evasion Using NTP appeared first on /dev/random.
Juniper identifies phishing campaign targeting business customers with malware using password protection, among other techniques, to avoid detection. Continue reading IcedID Trojan Rebooted with New Evasive Tactics
Security researchers spotted Trickbot malware checking the screen resolution as a means of evading analysis on a virtual machine (VM). Digital security firm MalwareLab came across a sample of the trojan that checked to see whether a computer’s sc… Continue reading Trickbot Malware Using Screen Resolution Checks as Anti-VM Tactic
Image Courtesy of Microsoft Security
In a masquerade and redirection ploy typically utilized by land, sea (surface and submersable), air and (highly likely) space warfare professionals, comes word of the same tactic targeting civilian users of our co… Continue reading Miscreant Hackers Co-Opt CAPTCHAs
The 12-year-old malware is still dangerous, sporting advanced evasion techniques. Continue reading Qbot Trojan Reappears to Go After U.S. Banking Customers
Business email compromise (BEC) attacks represent a small percentage of email attacks, but disproportionately represent the greatest financial risk. Continue reading Understanding the Payload-Less Email Attacks Evading Your Security Team
I published the following diary on isc.sans.edu: “Malicious Excel With a Strong Obfuscation and Sandbox Evasion“: For a few weeks, we see a bunch of Excel documents spread in the wild with Macro V4. But VBA macros remain a classic way to drop the next stage of the attack on the
[The post [SANS ISC] Malicious Excel With a Strong Obfuscation and Sandbox Evasion has been first published on /dev/random]
Continue reading [SANS ISC] Malicious Excel With a Strong Obfuscation and Sandbox Evasion
A new campaign is evading secure email gateways that rely on identifying word patterns in order to filter out spam. Continue reading Sextortionists Get Past Defenses with Cryptocurrency Shift