Collaborate Disseminate
A new threat group uses NSIS as an installer to target industrial companies with revolving payloads, including LokiBot, FormBook, BetaBot, Agent Tesla and Netwire. Continue reading RATicate Group Hits Industrial Firms With Revolving Payloads
The Grandoreiro banking malware uses remote overlay and a fake Chrome browser plugin to steal from banking customers. Continue reading Overlay Malware Leverages Chrome Browser, Targets Banks and Heads to Spain
A new dropper and payload show that Fin7 isn’t going anywhere despite a crackdown on the infamous group by law enforcement in 2018. Continue reading Fin7 Cybergang Retools With New Malicious Code
Though harboring unsophisticated payloads, the Panda threat group has updated its tactics – from targets to infrastructure – and successfully mined hundreds of thousands of dollars using cryptomining malware. Continue reading Panda Threat Group Mines for Monero With Updated Payload, Targets
Putting payloads into model rockets can be more complex than simply shoving stuff into an open spot, so [concretedog] put some work into making a modular payload tube for his current rocket. The nose cone for his rocket is quite large, so he opted to give it a secure payload …read more
Continue reading 3D Printing Makes Modular Payload For Model Rocket
Given the sheer volume of science going on as the International Space Station circles above our heads every 90 minutes or so, it would be hard for any one experiment to stand out. ISS expeditions conduct experiments on everything from space medicine to astrophysics and beyond, and the instruments needed …read more
The OceanLotus APT is using two new loaders which use steganography to read their encrypted payloads. Continue reading OceanLotus APT Uses Steganography to Shroud Payloads
Join us on Wednesday at noon Pacific time for the high-altitude ballooning Hack Chat!
The Cope brothers are our hosts this week. Jeremy, a computer engineer, and Jason, a mechanical engineer, have recently caught the high-altitude ballooning (HAB) bug. In their initial flights they’ve racked up some successes and pushed the edge of space with interesting and varied missions. Their first flight just barely missed the 100,000 foot (30,000 meter) mark and carried a simple payload package of cameras and GPS instruments and allowed them to reach their goal of photographing the Earth’s curvature.
Flight 2 had a similar payload …read more
Oh, the hijinks that the early days of the PC revolution allowed. Back in the days when a 20MB hard drive was a big deal and MS-DOS 3.1 ruled over every plain beige PC-clone cobbled together by enthusiasts like myself, it was great fun to “set up” someone else’s machine to do something unexpected. This generally amounted to finding an unattended PC — the rooms of the residence hall where I lived in my undergrad days were a target-rich environment in this regard — and throwing something annoying in the AUTOEXEC.BAT file. Hilarity ensued when the mark next booted the …read more
Continue reading 35C3: A Deep Dive into DOS Viruses and Pranks
Many different threat actors are using this crypting service/tool for their operations, possibly buying it from the developer itself. Continue reading Delphi Packer Looks for Human Behavior Before Deploying Payload