FIN7 Hitting Restaurants with Fileless Malware

FIN7, closely associated with the notorious Carbanak group, is behind a targeted phishing campaign singling out restaurants with fileless malware that is difficult to detect. The recent campaign incorporates, “never before seen evasive techniques that allow malware to bypass most security...

CVE-2 0 1 4-4 1 1 4 variants of sample analysis-vulnerability warning-the black bar safety net

Found a CVE-2 0 1 4-4 1 1 4 variants of the sample, the sample embedded with malicious code, can be directly to the local trigger, no need to from a remote shared server to download malicious code. Use UltraEdit to open the sample can be found within a block of the PE module information: ! ue.jpg...

CVE-2 0 1 4-4 1 1 4 sample analysis-vulnerability warning-the black bar safety net

Author: Nie. Meining posted on: 2014-10-17 2 0:5 8 classification: Debug Analysis a bit in these two days compared to the fire of the CVE-2 0 1 4-4 1 1 4, sample upload analysis platform immediately Alarm: ! CVE-2014-41140.jpg Detailed analysis of the results: to Oddly enough captures the excepti...

Twitter Upgrades Account Security Features

Twitter has made a couple of changes to the service’s login process to help prevent account takeovers and enable users to reset their passwords in a simpler way. A Twitter account is among the more valuable assets for an attacker who is targeting a specific person. Accounts typically are tied to ...

[Malheur v0.5.4] Malware Analyzer

Malheur is a tool for the automatic analysis of malware behavior program behavior recorded from malicious software in a sandbox environment. It has been designed to support the regular analysis of malicious software and the development of detection and defense measures. Malheur allows for...

ASEF Android Tool Analyzes App Security and Behavior

A researcher at Qualys has released a new tool designed to allow users–even non-technical ones–to evaluate the security and behaviors of the apps installed on their Android devices. Known as the Android Security Evaluation Framework, the tool not only looks at the general security of an app, but...

Researcher Releases JavaSnoop Java-Analysis Tool

Java has long been one of the more widely used–and widely criticized–technologies on the Web. It’s used virtually everywhere and roundly panned by security researchers for its security shortcomings. Now, a researcher has released a new tool, called JavaSnoop, that’s designed to help people better...

Introduction to Malware Analysis

In this video, Lenny Zeltser, a SANS instructor, outlines the basic concepts of reverse engineering malware, describing the process of analyzing the code and the behavior of the malware...