We shall attempt to define the terms packer, crypter, and protector in the context of how malware uses them in this post. Keep in mind that there are exceptions to the principles, all of these categories have overlap, and no definitions for them are absolute. But I think this categorisation makes the most sense. Packers […]
Understanding Packers, Crypters and Protectors: FUD Malwares Read More »
An Android malware known as Triada has been discovered being used by YoWhatsApp, an unauthorized variant of the well-known WhatsApp messaging software. The malware’s objective, according to a recent report from Kaspersky, is to steal the keys that “enable the operation of a WhatsApp account without the app.” A user of a malicious WhatsApp mod
Popular YoWhatsapp Discovered Distributing Triada Android Malware Read More »
A first-of-its-kind security analysis of iOS Find My function has identified a novel attack surface that makes it possible to tamper with the firmware and load malware onto a Bluetooth chip that’s executed while an iPhone is “off.” The mechanism takes advantage of the fact that wireless chips related to Bluetooth, Near-field communication (NFC), and
Researchers Find Potential Way to Run Malware on iPhone Even When it’s OFF Read More »
A year after potential candidates looking for work on LinkedIn were tempted with weaponized job offers, a new series of phishing assaults carrying the more eggs malware has been detected attacking corporate hiring supervisors with false resumes as an infection vector thus making it dubbed ‘the CV-WARE’ by Sly Uduosa, Slytech’s research lead. “This year,
As many as seven vulnerabilities have been disclosed in PTC’s Axeda software which could be weaponized to access medical and IoT devices without authorization. Popular known as Access:7, with weaknesses of which 3 are rated Critical in severity with the potential of affecting over 150 device models spanning over 100 different manufacturers which makes it
Access:7 Supply Chain Vulnerability Impacting ATMs, Medical and IoT Devices Read More »
A new Android trojan has been observed to be distributed via the official Google Play Store with the goal of targeting 56 European banks and carrying out harvesting sensitive information from compromised devices. The trojan has been nicknamed Xenomorph and its noticed to share overlaps with another banking trojan tracked under the moniker Alien while
Xenomorph Android Banking Trojan Now Spreading on Google Play Store Read More »
Microsoft announces plans to disable Visual Basic for Applications (VBA) macros by default across its products, including Word,Excel, PowerPoint, Access and Visio for documents downloaded from the web in an attempt to eliminate an entire class of attack vector. “Bad actors send macros in Office files to end users who unknowingly enable them, malicious payloads
As threat actors continuously change pattern, the operators of the SolarMarker information stealer and backdoor have been discovered to be leveraging stealthy tricks to establish long-term persistence on compromised systems. This was spotted by Sophos a cybersecurity firm, wherein they observed that the remote access implants are still being detected on targeted networks despite the
New Techniques Adopted By SolarMarker To Maintain Presence On Hacked Systems Read More »
The wiper malware which attacked dozens of Ukranian agencies earlier this month has been analysed thus revealing “strategic similarities” to NotPetya malware that was unleashed against the country’s infrastructure and elsewhere in 2017. WhisperGate as it is been called was discovered by Micrfosoft last week, which said it observed the destructive cyber campain targeting government,
Researchers Discover Strategic Similarities b/w Notpeya and WhisperGate Attatcks Read More »
A new malware called PseudoManyscrypt has been observed attacking industrial and government organizations including enterprises in the military-industrial complex and research laboratories. The name is derived from its similarities to the Manuscrypt malware which is part of trhe Lazarus APT groups attack toolset and the series of intrusion was first detected in June 2021. It
New PseudoManuscrypt Malware Currently Infecting Computers Read More »
