Collaborate Disseminate
The recently-patched flaw could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. Continue reading Darkhotel Exploits Microsoft Zero-Day VBScript Flaw
In total, Microsoft’s May Patch Tuesday roundup included 68 security patches, with 21 listed as critical, 45 rated important and two listed low in severity. Continue reading May Patch Tuesday Fixes Two Bugs Under Active Attack
Microsoft has said it will not patch a two-decade-old Windows SMB vulnerability, called SMBloris because it behaves comparably to the Slowloris attacks. The flaw will be disclosed and demonstrated during DEF CON. Continue reading Windows SMB Zero Day to Be Disclosed During DEF CON
FireEye said threat actors are using the NSA’s EternalBlue exploit of the same Microsoft SMBv1 vulnerability as WannaCry to spread Nitol and Gh0st RAT. Continue reading EternalBlue Exploit Spreading Gh0st RAT, Nitol
The Terror exploit kit has matured into a greater threat and carefully crafts attacks based on a user’s browser environment. Continue reading Terror Exploit Kit Evolves Into Larger Threat
A rash of Java-based remote access Trojans is targeting tax filers with bogus IRS attachments. Continue reading Wave of Java-Based RATs Target Tax Filers
Microsoft Patch Tuesday fixes 45 vulnerabilities, one being an active zero-day bug used to spread the Dridex banking Trojan. Continue reading Microsoft Patches Three Vulnerabilities Under Attack
Researchers are keeping close tabs on a new ransomware strain called Spora that offers victims unique payment options. Continue reading Spora Ransomware Offers Victims Unique Payment Options
A quick blog post about a malicious VBScript macro that I analysed… Bad guys have always plenty of ideas to obfuscate their code. The macro was delivered via a classic phishing email with an attached zip archive that contained a Windows .lnk file. The link containing a simple call to
[The post Using Monitor Resolution as Obfuscation Technique has been first published on /dev/random]
Continue reading Using Monitor Resolution as Obfuscation Technique
Learn the easy way to call PowerShell from VBScript