Shlayer Mac Malware Returns with Extra Sneakiness
Spreading via poisoned Google search results, this new version of Mac’s No. 1 threat comes with added stealth. Continue reading Shlayer Mac Malware Returns with Extra Sneakiness
Category Archives: Stealth
Plasma “Ghosts” May Help Keep Future Aircraft Safe
Air-to-air combat or “dogfighting” was once a very personal affair. Pilots of the First and Second World War had to get so close to land a hit with their guns that it wasn’t uncommon for altercations to end in a mid-air collision. But by the 1960s, guided missile technology had …read more
Continue reading Plasma “Ghosts” May Help Keep Future Aircraft Safe
Brand-New SystemBC Proxy Malware Spotted Using SOCKS5 for Stealth
The proxy is being distributed by the RIG and Fallout exploit kits. Continue reading Brand-New SystemBC Proxy Malware Spotted Using SOCKS5 for Stealth
Researchers in the Dark on Powerful LightNeuron Malware for Years
LightNeuron is the first to target Microsoft Exchange transport agents — and is used as a hub for major Turla APT espionage efforts. Continue reading Researchers in the Dark on Powerful LightNeuron Malware for Years
Why Is the Air Force Using Stealth Fighters to Blow Up Crude Drug Labs?
“The reality is we are fighting two wars, in Iraq and Afghanistan, and the F-22 has not performed a single mission in either theater.” Continue reading Why Is the Air Force Using Stealth Fighters to Blow Up Crude Drug Labs?
Iran’s Stealth Fighter Is Still Fake and Not Convincing Anyone
Iran’s military unveiled a new version of its homebuilt Qaher F313 fighter jet last weekend, but a drive down the runway revealed it’s far from ready for flight. Continue reading Iran’s Stealth Fighter Is Still Fake and Not Convincing Anyone
ProjectSauron APT On Par With Equation, Flame, Duqu
ProjectSauron, an APT attack platform, has been used since 2011 to target critical government, financial and communications organizations in a number of countries. Continue reading ProjectSauron APT On Par With Equation, Flame, Duqu
Poisoning the Well – Compromising GoDaddy Customer Support With Blind XSS
This is the first part of a series of stories of compromising companies via blind cross-site scripting. As companies fix the issues and allow me to disclose them, I will post them here. Blind cross-site scripting (XSS) is an often-missed class of XSS which occurs when an XSS payload fires in a browser other than… Read More Continue reading Poisoning the Well – Compromising GoDaddy Customer Support With Blind XSS