noisy

Noisy Un sencillo script de Python que genera ruido aleatorio de tráfico HTTP/DNS en segundo plano mientras navegas por la web de forma habitual, para que tus datos de tráfico web sean menos valiosos para la venta y proporcionen mayor oscuridad. Probado en MacOS High Sierra, Ubuntu 16.04 y Raspbi...

gohide

gohide Túnel de tráfico puerto a puerto a través de un canal ofuscado con cifrado AES-GCM. Modos de ofuscación Cookie de sesión HTTP GET http-client Set-Cookie de sesión HTTP/2 200 OK http-server Handshake WebSocket "Sec-WebSocket-Key" websocket-client Handshake WebSocket "Sec-WebSocket-Accept"...

ThunderShell

ThunderShell ThunderShell es un RAT en C que se comunica a través de solicitudes HTTP. Todo el tráfico de red está cifrado usando una segunda capa de RC4 para evitar la interceptación SSL y vencer la detección de red en el sistema objetivo. RC4 es un cifrado débil y se utiliza para ayudar a ofusc...

FBI Seizes NetNut Proxy Platform, Popa Botnet

The Federal Bureau of Investigation FBI said today it worked with industry partners to seize hundreds of domains associated with NetNut , a sprawling residential proxy service operated by the publicly-traded Israeli company Alarum TechnologiesNASDAQ: ALAR. The action comes roughly two weeks after...

Operation SkyCloak Deploys Tor-Enabled OpenSSH Backdoor Targeting Defense Sectors

Threat actors are leveraging weaponized attachments distributed via phishing emails to deliver malware likely targeting the defense sector in Russia and Belarus. According to multiple reports from Cyble and Seqrite Labs, the campaign is designed to deploy a persistent backdoor on compromised host...

TheMoon Rises Again, With a Botnet-as-a-Service Threat

TheMoon, an IoT botnet targeting home routers and modems, is entering a new phase, as it were: It has added a previously undocumented module that allows it to be sold as-a-service to other malicious actors. This has already had significant real-world consequences, according to CenturyLink Threat...

VPNFilter’s Arsenal Expands With Newly Discovered Modules

Researchers have discovered new modules in VPNFilter – the malware behind the widespread campaign in May that infected 75 router brands – revealing that its capabilities are much more widespread and sophisticated than previously thought. After reverse-engineering seven additional third-stage...