Collaborate Disseminate
Attackers have been tampering with TLS signatures at a scale never before seen using a technique called cipher-stunting. Continue reading Billions of Malicious Bots Take to Cipher-Stunting to Hide
Introduction
The concept of “packing” or “crypting” a
malicious program is widely popular among threat actors looking to
bypass or defeat analysis by static and dynamic analysis tools.
Evasion of classification and detection is an arms race in wh… Continue reading Increased Use of a Delphi Packer to Evade Malware Classification
A new botnet from the Dark Web displays a never-before-seen level of complexity in terms of the sheer breadth of its various tools. Continue reading Mylobot Botnet Emerges with Rare Level of Complexity
The main purpose of Grobios malware is to help attacker establish a strong, persistent foothold in a victim’s system, in order to drop additional payloads later. Continue reading RIG EK Still Makes Waves, This Time with a Stealthy Backdoor
Researchers at Endgame have found new versions of TeslaCrypt in the past few weeks that target a host of new and unusual file extensions, and deploy new obfuscation and evasion techniques. Continue reading Latest TeslaCrypt Targets New File Extensions, Invests Heavily in Evasion