Cmd and Conquer: De-DOSfuscation with flare-qdb
November 20 2018When Daniel Bohannon released his excellent DOSfuscation paper, I was fascinated to see how tricks I used as a systems engineer could help attackers evade detection....
Read moreFLARE VM Update
November 14 2018FLARE VM is the first of its kind reverse engineering and malware analysis distribution on Windows platform. Since its introduction in July 2017, FLARE VM...
Read moreFLARE VM Update
November 14 2018FLARE VM is the first of its kind reverse engineering and malware analysis distribution on Windows platform. Since its introduction in July 2017, FLARE VM...
Read moreFireEye has identified a suspected influence operation that appears to originate from Iran aimed at audiences in the U.S., U.K., Latin America, and the Middle East. This...
Read moreBIOS Boots What? Finding Evil in Boot Code at Scale!
August 8 2018The second issue is that reverse engineering all boot records is impractical. Given the job of determining if a single system is infected with a bootkit, a...
Read moreHow the Rise of Cryptocurrencies Is Shaping the Cyber Crime Landscape: The Growth of Miners
July 18 2018Introduction Cyber criminals tend to favor cryptocurrencies because they provide a certain level of anonymity and can be easily monetized. This interest has increased in...
Read moreHow the Rise of Cryptocurrencies Is Shaping the Cyber Crime Landscape: The Growth of Miners
July 18 2018Introduction Cyber criminals tend to favor cryptocurrencies because they provide a certain level of anonymity and can be easily monetized. This interest has increased in...
Read moreHow the Rise of Cryptocurrencies Is Shaping the Cyber Crime Landscape: The Growth of Miners
July 18 2018Introduction Cyber criminals tend to favor cryptocurrencies because they provide a certain level of anonymity and can be easily monetized. This interest has increased in...
Read moreIntroduction Through FireEye Dynamic Threat Intelligence (DTI), we observed RIG Exploit Kit (EK) delivering a dropper that leverages the PROPagate injection technique to inject code...
Read moreIntroduction Through FireEye Dynamic Threat Intelligence (DTI), we observed RIG Exploit Kit (EK) delivering a dropper that leverages the PROPagate injection technique to inject code...
Read more
Recent Comments