MemoryShellHunter

MemoryShellHunter Java Agent memory horse scanner combined with Call Graph modus About MemoryShellHunter es una herramienta Scanner/Killer de memory horse que combina la construcción dinámica de Call Graph. Soporta detección iniciada por Agent y Attach, compensando el problema de que las...

leaky-vessels-dynamic-detector

警告 このリポジトリはアーカイブされました。 コードへの更新は今後行われず、この通知を読む頃にはセキュリティ上の問題が発生していたり、動作しなくなっている可能性があります。 歴史的な目的のみでご利用いただき、取り扱いには十分注意してください。 Leaky Vessels Dynamic Detector このリポジトリには、runc および Docker の脆弱性 CVE-2024-21626、CVE-2024-23651、CVE-2024-23652、CVE-2024-23653 を対象とした eBPF ベースのランタイム検出のリファレンス実装が含まれています。これは Linux...

UIXPOSE: Mobile Malware Detection Via Intention-Behaviour Discrepancy Analysis

We introduce UIXPOSE, a source-code-agnostic framework that operates on both compiled and open-source apps. This framework applies Intention Behaviour Alignment IBA to mobile malware analysis, aligning UI-inferred intent with runtime semantics. Previous work either infers intent statically, e.g.,...

What is real-time protection and why do you need it?

The constant barrage of cyber threats can be overwhelming for all of us. And, as those threats evolve and attackers find new ways to compromise us, we need a way to keep on top of everything nasty that’s thrown our way. Malwarebytes’ free version tackles and reactively resolves threats already on...

Highly Sophisticated Parasite RAT Emerges on the Dark Web

Researchers are tracking a remote access trojan RAT on underground markets that, so far, has only been attributed to one small malicious email campaign. However, the RAT, dubbed Parasite HTTP by the Proofpoint researchers that discovered it, has an impressive list of sophisticated features –...

FIN7 Evolution and the Phishing LNK

FIN7 is a financially-motivated threat group that has been associated with malicious operations dating back to late 2015. FIN7 is referred to by many vendors as “Carbanak Group”, although we do not equate all usage of the CARBANAK backdoor with FIN7. FireEye recently observed a FIN7 spear phishin...