Collaborate Disseminate
For years it was possible to fool some security software into thinking malicious code had been digitally signed by Apple. Continue reading Apple code signing flaw could have made Mac malware look legit
I don’t believe I’ve ever done a video blog, but I wanted to show you what it looks like when we look at a fake malware pop-up. While I was prepping a lecture for a class I’m teaching by looking at something on Encyclopedia Britannica, I experien… Continue reading Fake Malware Pop-up Example
In the news, Intel drops plans to develop Spectre microcode for ancient chips, Critical flaw leaves thousands of Cisco Switches vulnerable to remote hacking, VirusTotal launches ‘Droidy’ sandbox to detect malicious Android apps, Facebook an… Continue reading Intel, Cisco, Facebook, & Twitter – Paul’s Security Weekly #554
One of the biggest and most popular multi-antivirus scanning engine service has today launched a new Android sandbox service, dubbed VirusTotal Droidy, to help security researchers detect malicious apps based on behavioral analysis.
VirusTotal, owned … Continue reading VirusTotal launches ‘Droidy’ sandbox to detect malicious Android apps
Facebook is in the news for a few days after the disclosure of the Cambridge Analytica scandal. A few days ago, another wave of rumours revealed that the Facebook app could collect your private data. Facebook denied and a ping-pong game started. Is it true or false? The fact is
[The post Facebook Archives Predictive Name: Some Found Online has been first published on /dev/random]
Continue reading Facebook Archives Predictive Name: Some Found Online
Jurijs Martisevs pled guilty to running a clearinghouse for criminal developers to see if anti-virus programs would detect their malware. Continue reading Anti-anti-virus service provider tied to huge hacks cops plea
Hackers armed with destructive malware appear to have compromised the main IT service provider for the Winter Olympic Games months before last week’s highly publicized cyberattack. Publicly available evidence analyzed by experts and reviewed by CyberScoop suggests that whoever deployed the Olympic Destroyer malware on Feb. 9 likely previously penetrated a series of computer systems in December belonging to Atos, a multinational information technology service provider that is hosting the cloud infrastructure for the Pyeongchang games. The evidence was recently posted to the VirusTotal repository, but information associated with the malware samples carries indications that the hackers were inside Atos systems since at least December. Some of the earliest samples were uploaded by unnamed VirusTotal users geographically located in France, where Atos is headquartered, and Romania, where some members of Atos’ security team work. On Feb. 9, the official Winter Olympics website went down for several hours, causing a disruption to ticket sales and downloads during the […]
The post Atos, IT provider for Winter Olympics, hacked months before Opening Ceremony cyberattack appeared first on Cyberscoop.
Alphabet Inc., the parent company of Google, said today it is in the process of rolling out a new service designed to help companies more quickly make sense of and act on the mountains of threat data produced each day by cybersecurity tools.
Countless … Continue reading Chronicle: A Meteor Aimed At Planet Threat Intel?
VirusTotal, a popular malware aggregation tool and repository, added a graphing feature on Monday to aid investigations by helping chart relationships across files, URLs, domains and IP addresses. VirusTotal analyzes files and URLs to help identify malware by running a large set of antivirus tools and website scanners against targets. It was launched in 2004 by the Spanish security company Hispasec Sistemas and acquired in 2012 by Google. The tool, which has received generally positive feedback so far, has been in development since at least last year. It comes on the heels of a revamped user interface and the addition of a premium file detection monitoring service called VirusTotal Monitor.
The post VirusTotal’s new graph feature maps malware appeared first on Cyberscoop.
Continue reading VirusTotal’s new graph feature maps malware
I run several rulesets using the VirusTotal “hunting” feature and I use private YARA rules to filter out false positives. For example:
private rule isDex
{
meta:
description = “To filter out DEX files that fire m… Continue reading Referencing to private YARA rules is not working on VirusTotal even though it worked earlier