Category Archives: obfuscation

[SANS ISC] Malicious Excel With a Strong Obfuscation and Sandbox Evasion

Posted on by

I published the following diary on isc.sans.edu: “Malicious Excel With a Strong Obfuscation and Sandbox Evasion“: For a few weeks, we see a bunch of Excel documents spread in the wild with Macro V4. But VBA macros remain a classic way to drop the next stage of the attack on the

[The post [SANS ISC] Malicious Excel With a Strong Obfuscation and Sandbox Evasion has been first published on /dev/random]

Continue reading [SANS ISC] Malicious Excel With a Strong Obfuscation and Sandbox Evasion→

Obfuscated WordPress Malware Dropper

Posted on by

It goes without saying that evasive maneuvering is at the top of a hacker’s priority list. Most often, they try to evade detection by obfuscating their malicious code to make it unreadable to the naked eye.
In our recent post we demonstrated how… Continue reading Obfuscated WordPress Malware Dropper→

Web Skimmer with a Domain Name Generator

Posted on by

Our security analyst Moe Obaid recently found yet another variation of a web skimmer script injected into a Magento database.
The malicious script loads the credit card stealing code from qr201346[.]pw and sends the stolen details to hxxps://gooogleta… Continue reading Web Skimmer with a Domain Name Generator→

Is there any existing obfuscation scheme that makes cipher text indistinguishable from plain text? [migrated]

Posted on by

Suppose a totalitarian government (in the name of anti-terrorism / protection of intellectual property):

has outlawed encryption itself – encryption is only approved for cases where the state has reviewed the design and made sure it can … Continue reading Is there any existing obfuscation scheme that makes cipher text indistinguishable from plain text? [migrated]→

[SANS ISC] Simple but Efficient VBScript Obfuscation

Posted on by

I published the following diary on isc.sans.edu: “Simple but Efficient VBScript Obfuscation“: Today, it’s easy to guess if a piece of code is malicious or not. Many security solutions automatically detonate it into a sandbox by security solutions. This remains quick and (most of the time still) efficient to have a first

[The post [SANS ISC] Simple but Efficient VBScript Obfuscation has been first published on /dev/random]

Continue reading [SANS ISC] Simple but Efficient VBScript Obfuscation→