Evasive_Malware_Book_Samples

Muestras del libro "Evasive Malware" Las muestras referenciadas en mi libro, Evasive Malware: A Field Guide to Detecting, Analyzing, and Defeating Advanced Threats https://nostarch.com/evasive-malware Aviso legal Este repositorio se proporciona únicamente con fines educativos y de investigación e...

PMAT-labs

PMAT-labs 🔬 欢迎来到《实用恶意软件分析与分类》实验手册。 🔴 警告 🔴 请仔细阅读以下内容。 本仓库包含用于《实用恶意软件分析与分类》（PMAT）课程的活跃恶意软件样本。这些样本有的是为模拟常见恶意软件特征而编写，有的则是真实世界的“野外捕获”样本。两类样本均具有危险性。任何时候都必须极其谨慎地处理这些样本。 请勿将样本下载至您不拥有的计算机。 请勿在您不拥有的计算机上执行任何样本。 请勿在无法恢复至已保存状态的环境中（例如虚拟机）下载和/或执行这些样本。 使用这些样本时，始终遵循安全的恶意软件处理程序。...

security-labs-pocs

Investigación de Datadog Security Labs y Código de Prueba de Concepto Este repositorio contiene información, exploits, muestras de malware y scripts de Datadog Security Labs. Objetivo Este repositorio tiene como objetivo proporcionar exploits de prueba de concepto, muestras de malware y...

obfuscation_detection

Obfuscation Detection v2.4 Author: Tim Blazytko Automatically detect obfuscated code and other interesting code constructs Description: Obfuscation Detection is a Binary Ninja plugin to detect obfuscated code and interesting code constructs e.g., state machines in binaries. Given a binary, the...

dynmx

dynmx Prototype dynmx spoken dynamics is a signature-based detection approach for behavioural malware features based on Windows API call sequences. In a simplified way, you can think of dynmx as a sort of YARA for API call traces so called function logs originating from malware sandboxes. Hence,...

malware-samples

malware-samples Una colección de muestras de malware e información de análisis relevante, muy probablemente referenciada desde http://blog.inquest.net o https://twitter.com/inquest. Asegúrate de revisar también la sección de Deep File Inspection DFI de https://labs.inquest.net para una interfaz...

Configuration_extractors

Configurationextractors Vidar Stealer: El extractor de configuración fue probado en las siguientes muestras: 37c74886ce85682039bced4a6423e233aebd962921d9a76008d19ff75483a52c 6956fb2dd65d6627c23b680d4149983017bcb8e8b8fc1d30a5210998ca8cf801...

malware-samples

malware-samples Una colección de muestras de malware capturadas por varios honeypots que gestiono en todo el mundo. ATENCIÓN: Este repositorio contiene malware real. No ejecutes ninguno de estos archivos en tu PC a menos que sepas exactamente lo que estás haciendo. Todas las muestras de malware...

malware-samples

Muestras de malware Este repositorio está pensado para proporcionar acceso a una amplia variedad de archivos maliciosos y otros artefactos. Todas las muestras están en un archivo ZIP protegido con contraseña, utilizando la contraseña: infected Ejercicios de análisis de malware Además de...

linux-malware-toolbox

Linux Malware Samples - Educational Repository ⚠️ IMPORTAN...

linux-malwares

Linux Malware Samples - Educational Repository ⚠️ IMPORTAN...

APThreatHunter: An Automated Planning-Based Threat Hunting Framework

Cyber attacks threaten economic interests, critical infrastructure, and public health and safety. To counter this, entities adopt cyber threat hunting, a proactive approach that involves formulating hypotheses and searching for attack patterns within organisational networks. Automating cyber thre...

EUVD-2015-8844

Malware in sbrugna...

MalEval Android Malware Evaluation Framework

This repository contains the source code of MalEval, an evaluation framework for Android malware behavior auditing, focusing on explaining and substantiating malicious behaviors. The framework provides expert-verified reports, curated metadata, and model outputs to enable reproducible evaluation ...

Secure Development of a Hooking-Based Deception Framework against Keylogging Techniques

Keyloggers remain a serious threat in modern cybersecurity, silently capturing user keystrokes to steal credentials and sensitive information. Traditional defenses focus mainly on detection and removal, which can halt malicious activity but do little to engage or mislead adversaries. In this pape...

FOG Ransomware Spread by Cybercriminals Claiming Ties to DOGE

This blog details our investigation of malware samples that conceal within them a FOG ransomware payload...

Dissecting a Clever Malware Sample for Optimized Detection and Protection

As part of our product lineup, we offer security monitoring and malware removal services to our Wordfence Care and Response customers. In case of a security incident, our incident response team will investigate the root cause, find and remove malware from your site, and help with other...

Can Business Cybersecurity Protection Outlay Offset Cybercrime Insurance?

What is cybercrime insurance? Business cybersecurity protection cybercrime insurance safeguards organizations from any financial losses relating to damage to or loss of information from, networks and IT systems. This may include reputation loss, the cost of business interruption, infringement of...

Cybercriminals Swarm Windows Utility Regsvr32 to Spread Malware

A Windows living-off-the-land binary LOLBin known as Regsvr32 is seeing a big uptick in abuse of late, researchers are warning, mainly spreading trojans like Lokibot and Qbot. LOLBins are legitimate, native utilities used daily in various computing environments, that cybercriminals use to evade...

US Cyber Command Links 'MuddyWater' Hacking Group to Iranian Intelligence

The U.S. Cyber Command USCYBERCOM on Wednesday officially confirmed MuddyWater's ties to the Iranian intelligence apparatus, while simultaneously detailing the various tools and tactics adopted by the espionage actor to burrow into victim networks. "MuddyWater has been seen using a variety of...