EUVD-2008-1565

Malware in sbrugna...

Behind the scenes with the head of Kaspersky’s GReAT

Costin Raiu has been with Kaspersky since 2000, initially as the Chief Security Expert overseeing research efforts in the EEMEA region. In 2010, he became Director of our Global Research and Analysis Team GReAT. During his tenure at Kaspersky, he has spearheaded the companys research on some of t...

Costin Raiu and Juan Andres Guerrero-Saade on APT Fourth-Party Collection

Costin Raiu and Juan Andres Guerrero-Saade talk to Mike Mimoso live from Virus Bulletin in Madrid about APTs leveraging one anothers’ attacks and compromised machines as their own. The practice, known as fourth-party collection, is wreaking havoc for researchers with regard to attribution...

Costin Raiu on the Importance of Using YARA

Ryan Naraine talks with Costin Raiu, the Global Director of GReAT at Kaspersky Lab, about the benefits of taking the YARA training class available at SAS 2017. Listen to learn about how YARA can be used in malware hunting, data analysis and incident response activities. Download:...

BlackEnergy APT Group Spreading Malware via Tainted Word Docs

Attackers have begun using rigged Microsoft Word documents propagated via spearphishing emails to spread the BlackEnergy Trojan. Researchers with Kaspersky Lab’s Global Research and Analysis Team discovered a malicious Word document last week that appears to stem from a campaign against one of th...

Costin Raiu on the Equation Group APT

CANCUN–Dennis Fisher talks with Costin Raiu of the Kaspersky Lab GReAT team about the researcher behind the Equation Group campaign, the group’s capabilities and why they seem to have gone dark now. READ Massive Decades Long Cyberespionage Campaign Uncovered READ Inside nls933w.dll, the Equation...

Costin Raiu on the Regin APT Malware

Denis Fisher talks with Costin Raiu of the Kaspersky Lab GReAT Team about the discovery of the Regin APT malware, the threat’s targets and tactics, its ability to compromise GSM base stations and its other capabilities. Download: digitalunderground173.mp3 Music by Chris Gonsalves...

Costin Raiu on the Intricacies of the miniDuke Malware Campaign

With Dennis Fisher out of pocket at the RSA Conference in San Francisco, Ryan Naraine hijacks the Digital Underground podcast and gets on the phone with Kaspersky Lab research guru Costin Raiu to talk about the intricacies of the miniDuke malware campaign. Download: digitalunderground113 Subscrib...

Eugene Kaspersky

Costin Raiu, the head of the Kaspersky Lab Global Research and Analysis Team, Petr Merkulov, chief product officer, and CEO Eugene Kaspersky, discussed the need for better awareness of security threats and more comprehensive protection...

Costin Raiu on the Red October Cyberespionage Campaign

Dennis Fisher talks with Costin Raiu and Ryan Naraine about the newly uncovered Red October cyberespionage campaign that has targeted embassies, diplomats, research facilities and military targets for more than five years now. Raiu explains the origins of the campaign, where the attackers likely...

Costin Raiu on the Timing of the Duqu Attacks

Threatpost editor Dennis Fisher and Kaspersky Lab’s Costin Raiu discuss the timing of the Duqu attacks, how that may hint at the identities of its creator and what other mysteries about the worm remain. RELATED Q&A Anatomy of the Duqu Attacks...

Costin Raiu on Duqu, Stuxnet and Targeted Attacks

Dennis Fisher talks with malware researcher Costin Raiu about the investigation into Duqu, the likelihood that it was written by the same team as Stuxnet, whether a government is behind its development and what mistakes the authors made. Podcast audio courtesy of sykboy65 Subscribe to the Digital...

Talking Twitter Malware with Costin Raiu

On the heels of yet another Twitter phishing attack, Threatpost editor Ryan Naraine chats with Kaspersky Lab malware researcher Costin Raiu about a new "Krab Krawler" project that pinpoints signs of malicious activity on Twitter. Raiu introduced the project at this year’s Virus Bulletin conferenc...

CVE-2008-1564

Directory traversal vulnerability in Dan Costin File Transfer before 1.2f allows remote attackers to read arbitrary files via a ".." dot dot backslash in the filename...

CVE-2008-1564

Directory traversal vulnerability in Dan Costin File Transfer before 1.2f allows remote attackers to read arbitrary files via a ".." dot dot backslash in the filename...

CVE-2008-1564

CVE-2008-1564 describes a directory traversal vulnerability in Dan Costin File Transfer, prior to version 1.2f. It allows remote attackers to read arbitrary files by supplying a "..\" sequence in the filename. The NVD entry notes a CVSSv2 base score of 4.3 (Medium) with network access and no auth...

Alphanumeric Shellcode Encoder Decoder

Exploit for generator platform in category shellcode ====================================== Alphanumeric Shellcode Encoder Decoder ====================================== / //////////////////////////////////////////////////////////////////////////////////////////////////////////////////////...