hollows_hunter

hollowshunter Hollows Hunter는 PE-sieve 패시브 메모리 스캐너 기반의 명령줄 애플리케이션입니다. 다양한 잠재적 악성 임플란트대체/주입된 PE, 셸코드, 후크, 인메모리 패치를 탐지하고 덤프합니다. PE-sieve의 경우 PID로만 프로세스를 선택할 수 있는 반면, Hollows Hunter는 다음과 같은 다양한 기준으로 프로세스를 선택할 수 있습니다: PID 목록 이름 목록 생성 시간 Hollows Hunter 실행 시간 기준 특정 대상이 선택되지 않으면 사용 가능한 모든 프로세스를 스캔합니다...

Libpeconv 输入验证错误漏洞

libPeConv is a library for loading and manipulating PE files by hasherezade individual developers. A security vulnerability exists in versions prior to Libpeconv 75b1565 30/11/2022 that stems from the presence of an integer overflow...

Terdot Trojan likes social media

We usually advise people that have fallen victim to banker Trojans to change all their passwords, especially the ones that are related to their financial sites and apps. Besides the dangers of re-used passwords, there are other reasons why this is important. This advice is especially applicable t...

BadRabbit ransomware strikes Eastern Europe

A new strain of ransomware called BadRabbit is spreading through Eastern Europe. Likely created by the same authors as the Petya/Not Petya ransomware outbreak in June, BadRabbit ransomware uses a website to drop a fake Flash update and then drops its payload. Click to view slideshow. Countries we...