< Back to JetLib.com

malware

« Expand/Collapse

331 items tagged "malware"

Skip to page: 1 2

May 15, 2012
15:14
Apple Security Advisory 2012-05-14-1
» ‎ Packet Storm Security Advisories

Apple Security Advisory 2012-05-14-1 - This update runs a malware removal tool that will remove the most common variants of the Flashback malware. If the Flashback malware is found, it presents a dialog notifying the user that malware was removed. There is no indication to the user if malware is not found.
Tags: malware apple security malware-removal-tool security-advisory flashback

15:14
Apple Security Advisory 2012-05-14-1
» ‎ Packet Storm Security Recent Files

Apple Security Advisory 2012-05-14-1 - This update runs a malware removal tool that will remove the most common variants of the Flashback malware. If the Flashback malware is found, it presents a dialog notifying the user that malware was removed. There is no indication to the user if malware is not found.
Tags: malware advisory flashback apple-security malware-removal-tool security-advisory

15:14
Apple Security Advisory 2012-05-14-1
» ‎ Packet Storm Security Misc. Files

Apple Security Advisory 2012-05-14-1 - This update runs a malware removal tool that will remove the most common variants of the Flashback malware. If the Flashback malware is found, it presents a dialog notifying the user that malware was removed. There is no indication to the user if malware is not found.
Tags: malware advisory flashback apple-security malware-removal-tool security-advisory

10:29
Android Malware Levels Quadrupled Over Past Two Years
» ‎ Packet Storm Security Headlines

Android Malware Levels Quadrupled Over Past Two Years
Tags: malware android levels
May 07, 2012
12:48
New Malware Strain Locks Up Computers Unless Ransom Is Paid
» ‎ Packet Storm Security Headlines

New Malware Strain Locks Up Computers Unless Ransom Is Paid
Tags: strain malware ransom new new-malware locks
May 02, 2012
8:47
Flashback Malware Earns Makers $10,000 A Day
» ‎ Packet Storm Security Headlines

Flashback Malware Earns Makers $10,000 A Day
Tags: makers earns malware flashback

May 01, 2012
19:02
Reverse Engineering Malware Part 1
» ‎ Packet Storm Security Misc. Files

Whitepaper called Reverse Engineering Malware Part 1.
Tags: part malware engineering reverse-engineering whitepaper

April 27, 2012
13:33
HP Security Bulletin HPSBPV02754 SSRT100803 2
» ‎ Packet Storm Security Advisories

HP Security Bulletin HPSBPV02754 SSRT100803 2 - A potential security vulnerability has been identified with certain HP ProCurve 5400 zl switches using a compact flash card which may contain malware content that is a PC trojan executable. The ProCurve switch operating system is not infected with the malware and the content on the compact flash card has no impact on the operation of the switch. Reuse of the compact flash card in a personal computer and manual execution of the malware content could result in a compromise of that system's integrity. Revision 2 of this advisory.
Tags: malware card security compact-flash-card potential-security-vulnerability hp-procurve

13:33
HP Security Bulletin HPSBPV02754 SSRT100803 2
» ‎ Packet Storm Security Recent Files

HP Security Bulletin HPSBPV02754 SSRT100803 2 - A potential security vulnerability has been identified with certain HP ProCurve 5400 zl switches using a compact flash card which may contain malware content that is a PC trojan executable. The ProCurve switch operating system is not infected with the malware and the content on the compact flash card has no impact on the operation of the switch. Reuse of the compact flash card in a personal computer and manual execution of the malware content could result in a compromise of that system's integrity. Revision 2 of this advisory.
Tags: malware card security compact-flash-card potential-security-vulnerability hp-procurve

13:33
HP Security Bulletin HPSBPV02754 SSRT100803 2
» ‎ Packet Storm Security Misc. Files

HP Security Bulletin HPSBPV02754 SSRT100803 2 - A potential security vulnerability has been identified with certain HP ProCurve 5400 zl switches using a compact flash card which may contain malware content that is a PC trojan executable. The ProCurve switch operating system is not infected with the malware and the content on the compact flash card has no impact on the operation of the switch. Reuse of the compact flash card in a personal computer and manual execution of the malware content could result in a compromise of that system's integrity. Revision 2 of this advisory.
Tags: malware card security compact-flash-card potential-security-vulnerability hp-procurve

April 23, 2012
15:00
One in Every Five Mac Computers Harbors Malware, Sophos Research Reveals
» ‎ Sophos security news

One in Every Five Mac Computers Harbors Malware, Sophos Research Reveals
Tags: research sophos malware mac-computers

April 18, 2012
21:27
[Video] Adventures in analyzing Stuxnet
» ‎ SecDocs

Authors: Bruce Dang Peter Ferrie
Tags: malware malware analysis Stuxnet
Event: Chaos Communication Congress 27th (27C3) 2010
Abstract: There has been many publications on the topic of Stuxnet and its "sophistication" in the mainstream press. However, there is not a complete publication which explains all of the technical vulnerability details and how they were discovered. In this talk, you will get a first-hand account of the entire story. We will discuss various techniques used in analyzing Stuxnet. First, we will share several tricks that were used to quickly identify the vulnerabilities. Second, we describe the thought processes that went into debugging and triaging the vulnerabilities themselves. Finally, we show some tips that you can use if you feel like decompiling stuff for fun :).
Tags: malware video stuxnet bruce-dang peter-ferrie chaos-communication-congress technical-vulnerability mainstream-press
21:27
[Audio] Adventures in analyzing Stuxnet
» ‎ SecDocs

Authors: Bruce Dang Peter Ferrie
Tags: malware malware analysis Stuxnet
Event: Chaos Communication Congress 27th (27C3) 2010
Abstract: There has been many publications on the topic of Stuxnet and its "sophistication" in the mainstream press. However, there is not a complete publication which explains all of the technical vulnerability details and how they were discovered. In this talk, you will get a first-hand account of the entire story. We will discuss various techniques used in analyzing Stuxnet. First, we will share several tricks that were used to quickly identify the vulnerabilities. Second, we describe the thought processes that went into debugging and triaging the vulnerabilities themselves. Finally, we show some tips that you can use if you feel like decompiling stuff for fun :).
Tags: malware audio stuxnet bruce-dang peter-ferrie chaos-communication-congress technical-vulnerability mainstream-press

April 16, 2012
9:00
Bugtraq: APPLE-SA-2012-04-13-1 Flashback malware removal tool
» ‎ SecurityFocus Vulnerabilities

APPLE-SA-2012-04-13-1 Flashback malware removal tool
Tags: malware flashback removal removal-tool bugtraq

3:38
Android Trojan Targets Japanese Market – Steals Personal Data
» ‎ Darknet

Early last year we wrote about China Facing Problems With Android Handsets & Pre-installed Trojans, then later last year there was a possibility Cybercrooks May Be Able To Force Mobile Phones To Send Premium-Rate SMS Messages. The latest news about Android malware is malicious apps that are in the official Google marketplace (called Play)...

Read the full post at darknet.org.uk

Tags: year trojan android read china google darknet japanese-market malware

April 11, 2012
20:49
Malware-Infected Flash Card Shipped Out With HP Switches
» ‎ Packet Storm Security Headlines

Malware-Infected Flash Card Shipped Out With HP Switches
Tags: infected malware flash hp-switches flash-card

April 09, 2012
21:19
Malware Removal Guide For Windows
» ‎ Packet Storm Security Recent Files

Malware Removal Guide for Windows was written to help remove most malicious software on a Windows operation system.
Tags: malware removal windows windows-operation malicious-software removal-guide

21:19
Malware Removal Guide For Windows
» ‎ Packet Storm Security Misc. Files

Malware Removal Guide for Windows was written to help remove most malicious software on a Windows operation system.
Tags: malware removal windows windows-operation malicious-software removal-guide

April 05, 2012
8:23
Fake Angry Bird Apps Hide Android-Rooting Malware
» ‎ Packet Storm Security Headlines

Fake Angry Bird Apps Hide Android-Rooting Malware
Tags: fake angry bird hide-android- malware
8:20
Half A Million Mac Computers 'Infected With Malware'
» ‎ Packet Storm Security Headlines

Half A Million Mac Computers 'Infected With Malware'
Tags: million infected malware mac-computers half-a-million

April 04, 2012
7:32
Hook Analyser Malware Tool 1.4
» ‎ Packet Storm Security Misc. Files

Hook Analyser is a hook tool which can be potentially helpful in reversing applications and analysing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.
Tags: analyser hook malware hook-tool tool-1 analysing

April 03, 2012
19:20
Update Of Android Malware Uses Exploit To Take Over
» ‎ Packet Storm Security Headlines

Update Of Android Malware Uses Exploit To Take Over
Tags: update malware android
March 30, 2012
7:59
Android Trojan Malware Targets Gamers
» ‎ Packet Storm Security Headlines

Android Trojan Malware Targets Gamers
Tags: malware trojan android

March 29, 2012
15:22
[Video] Print Me If You Dare
» ‎ SecDocs

Authors: Ang Cui Jonathan Voris
Tags: hardware hacking
Event: Chaos Communication Congress 28th (28C3) 2011
Abstract: Network printers are ubiquitous fixtures within the modern IT infrastructure. Residing within sensitive networks and lacking in security, these devices represent high-value targets that can theoretically be used not only to manipulate and exfiltrate the sensitive information such as network credentials and sensitive documents, but also as fully functional general-purpose bot-nodes which give attackers a stealthy, persistent foothold inside the victim network for further recognizance, exploitation and exfiltration. We first present several generic firmware modification attacks against HP printers. Weaknesses within the firmware update process allows the attacker to make arbitrary modifications to the NVRAM contents of the device. The attacks we present exploit a functional vulnerability common to all HP printers, and do not depend on any specific code vulnerability. These attacks cannot be prevented by any authentication mechanism on the printer, and can be delivered over the network, either directly or through a print server (active attack) and as hidden payloads within documents (reflexive attack). In order to demonstrate these firmware modification attacks, we present a detailed description of several common HP firmware RFU (remote firmware update) formats, including the general file format, along with the compression and checksum algorithms used. Furthermore, we will release a tool (HPacker), which can unpack existing RFUs and create/pack arbitrary RFUs. This information was obtained by analysis of publicly available RFUs as well as reverse engineering the SPI BootRom contents of several printers. Next, we describe the design and operation a sophisticated piece of malware for HP (P2050) printers. Essentially a VxWorks rootkit, this malware is equipped with: port scanner, covert reverse-IP proxy, print-job snooper that can monitor, intercept, manipulate and exfiltrate incoming print-jobs, a live code update mechanism, and more (see presentation outline below). Lastly, we will demonstrate a self-propagation mechanism, turning this malware into a full-blown printer worm. Using HPacker, we demonstrate the injection of our malware into arbitrary P2050 RFUs, and show how similar malware can be created for other popular HP printer types. Next, we demonstrate the delivery of this modified firmware update over the network to a fully locked-down printer. Lastly, we present an accurate distribution of all HP printers vulnerable to our attack, as determined by our global embedded device vulnerability scanner (see [1]). Our scan is still incomplete, but extrapolating from available data, we estimate that there exist at least 100,000 HP printers that can be compromised through an active attack, and several million devices that can be compromised through reflexive attacks. We will present a detailed breakdown of the geographical and organizational distribution of observable vulnerable printers in the world. *We have also unpacked several engine-control processor firmwares (different from the main SoC) and are currently attempting to locate code related to tracking dots. Perhaps we will have some results by December. In any case, HPacker will help the community to do further research in this direction, possibly allowing us to spoof / disable these yellow dots of burden.
Tags: malware network firmware jonathan-voris chaos-communication-congress hp-printers hp-firmware
15:07
[Audio] Print Me If You Dare
» ‎ SecDocs

Authors: Ang Cui Jonathan Voris
Tags: hardware hacking
Event: Chaos Communication Congress 28th (28C3) 2011
Abstract: Network printers are ubiquitous fixtures within the modern IT infrastructure. Residing within sensitive networks and lacking in security, these devices represent high-value targets that can theoretically be used not only to manipulate and exfiltrate the sensitive information such as network credentials and sensitive documents, but also as fully functional general-purpose bot-nodes which give attackers a stealthy, persistent foothold inside the victim network for further recognizance, exploitation and exfiltration. We first present several generic firmware modification attacks against HP printers. Weaknesses within the firmware update process allows the attacker to make arbitrary modifications to the NVRAM contents of the device. The attacks we present exploit a functional vulnerability common to all HP printers, and do not depend on any specific code vulnerability. These attacks cannot be prevented by any authentication mechanism on the printer, and can be delivered over the network, either directly or through a print server (active attack) and as hidden payloads within documents (reflexive attack). In order to demonstrate these firmware modification attacks, we present a detailed description of several common HP firmware RFU (remote firmware update) formats, including the general file format, along with the compression and checksum algorithms used. Furthermore, we will release a tool (HPacker), which can unpack existing RFUs and create/pack arbitrary RFUs. This information was obtained by analysis of publicly available RFUs as well as reverse engineering the SPI BootRom contents of several printers. Next, we describe the design and operation a sophisticated piece of malware for HP (P2050) printers. Essentially a VxWorks rootkit, this malware is equipped with: port scanner, covert reverse-IP proxy, print-job snooper that can monitor, intercept, manipulate and exfiltrate incoming print-jobs, a live code update mechanism, and more (see presentation outline below). Lastly, we will demonstrate a self-propagation mechanism, turning this malware into a full-blown printer worm. Using HPacker, we demonstrate the injection of our malware into arbitrary P2050 RFUs, and show how similar malware can be created for other popular HP printer types. Next, we demonstrate the delivery of this modified firmware update over the network to a fully locked-down printer. Lastly, we present an accurate distribution of all HP printers vulnerable to our attack, as determined by our global embedded device vulnerability scanner (see [1]). Our scan is still incomplete, but extrapolating from available data, we estimate that there exist at least 100,000 HP printers that can be compromised through an active attack, and several million devices that can be compromised through reflexive attacks. We will present a detailed breakdown of the geographical and organizational distribution of observable vulnerable printers in the world. *We have also unpacked several engine-control processor firmwares (different from the main SoC) and are currently attempting to locate code related to tracking dots. Perhaps we will have some results by December. In any case, HPacker will help the community to do further research in this direction, possibly allowing us to spoof / disable these yellow dots of burden.
Tags: malware network firmware jonathan-voris chaos-communication-congress hp-printers hp-firmware

March 26, 2012
10:09
Chrome Extensions Malware Hijacks Facebook Profiles
» ‎ Packet Storm Security Headlines

Chrome Extensions Malware Hijacks Facebook Profiles
Tags: malware extension profiles
March 23, 2012
17:09
Detecting And Removing The Flashback Malware In OS X
» ‎ Packet Storm Security Headlines

Detecting And Removing The Flashback Malware In OS X
Tags: flashback removing detecting malware os-x
March 15, 2012
8:25
Mobile Banking Security Bypassed In Fiendish Malware Blag
» ‎ Packet Storm Security Headlines

Mobile Banking Security Bypassed In Fiendish Malware Blag
Tags: banking mobile security banking-security mobile-banking malware
March 12, 2012
17:05
Symantec Warns Of Spread Of Mobile Malware Via Twitter
» ‎ Packet Storm Security Headlines

Symantec Warns Of Spread Of Mobile Malware Via Twitter
Tags: spread symantec warns malware
March 07, 2012
8:31
2 In 3 Android Anti-Malware Scanners Not Up To The Job
» ‎ Packet Storm Security Headlines

2 In 3 Android Anti-Malware Scanners Not Up To The Job
Tags: anti malware android scanners job

March 05, 2012
11:06
Hacker On Hacker Action – Zeus Botmaster Targets Anonymous Supporters
» ‎ Darknet

It somehow reminds me of the oldskool game Spy vs Spy, anyone remember that? Anyhow, that’s off-topic right now. The news is, some smart malware pimp managed to dupe a whole bunch of Anonymous supporters into installing the Zeus botnet – when they thought they were getting a DDoS tool. It’s a pretty big base [...]

Read the full post at darknet.org.uk

Tags: hacker spy anonymous read zeus zeus-botmaster game-spy ddos-tool botmaster malware

February 21, 2012
19:11
Malware Levels Starting To Show Signs Of Slowing
» ‎ Packet Storm Security Headlines

Malware Levels Starting To Show Signs Of Slowing
Tags: show malware levels signs
February 16, 2012
8:32
Mobile Malware Rises 155 Percent As Android Grows
» ‎ Packet Storm Security Headlines

Mobile Malware Rises 155 Percent As Android Grows
Tags: grows rise malware android
February 10, 2012
22:59
RootSmart Android Malware Analysis
» ‎ Packet Storm Security Headlines

RootSmart Android Malware Analysis
Tags: malware android rootsmart
14:07
Malware Devs Embrace Open Source
» ‎ Packet Storm Security Headlines

Malware Devs Embrace Open Source
Tags: devs malware embrace open-source
14:07
Mobile Security Researchers Warn Of Evolving Android Malware
» ‎ Packet Storm Security Headlines

Mobile Security Researchers Warn Of Evolving Android Malware
Tags: mobile researchers security security-researchers mobile-security malware

February 01, 2012
21:41
[Slides] Taming Worms, RATs, Dragons and More!
» ‎ SecDocs

Authors: Christiaan Beek
Tags: malware intelligence malware analysis
Event: Black Hat Abu Dhabi 2011
Abstract: Over years the use of malware has dramatically changed. Ranging from programmers exploring the malicious possibilities of their programming code, copycats trying to combine code snippets, to organized crime and governments using custom made malware for their purposes. Where financial gratification is the main drive for cybercrime, it seems that the hunger for secrets and intellectual property is taking over. Some examples of cases are: Operation Aurora, Night-Dragon and recently Shady-RAT. These are examples of investigations that started with the detection of unknown customized malware, hiding on corporate networks and ended in large investigations regarding Data Loss. So how is it possible that this malware was undetected? How can you detect hidden malware on your network using open-source tools, what patterns to look for? What countermeasures can you take? How to build a layered malware defense to keep unknown malware out of your network. In my talk I will give some demo's how you can use Wireshark to investigate networkdata for traces of malware, how to filter for suspicious connections.
Tags: malware network code aurora abu-dhabi open-source-tools using-open-source-tools night-dragon

January 30, 2012
21:36
WordPress Targeted In Malware Attack
» ‎ Packet Storm Security Headlines

WordPress Targeted In Malware Attack
Tags: wordpress targeted malware

January 26, 2012
13:49
[Slides] Malware on the Net - Behind the Scenes
» ‎ SecDocs

Authors: Iftach Ian Amit
Tags: malware
Event: Black Hat EU 2008

Tags: authors malware scenes ian-amit-tags black-hat amit slides
13:49
[Paper] Malware on the Net - Behind the Scenes
» ‎ SecDocs

Authors: Iftach Ian Amit
Tags: malware
Event: Black Hat EU 2008

Tags: malware scenes paper ian-amit-tags black-hat amit

January 25, 2012
7:58
Super Powered Malware Sandwiches Found In The Wild – Frankenmalware
» ‎ Darknet

Now this is quite a fascinating story, especially if you know anything about Malware and have interests in that area. It seems the latest development is the accidental development of new super-malware strains created by viruses infecting executable files of worms. Worms are generally executable files and well, viruses infect executables – so...

Read the full post at darknet.org.uk

Tags: super malware development read darknet executable-files strains malware

January 19, 2012
8:04
Carberp Malware Targets Facebook Users
» ‎ Packet Storm Security Headlines

Carberp Malware Targets Facebook Users
Tags: carberp malware target targets

January 18, 2012
21:49
[Paper] Combatting Symbian Malware
» ‎ SecDocs

Authors: Jarno Niemelä
Tags: malware phone
Event: Black Hat Federal 2006

Tags: malware symbian paper black-hat

15:54
Malware Reverse Engineering Part 1 - Static Analysis
» ‎ Packet Storm Security Recent Files

This malware report is part 1 of 2. This report is an effort to track, categorize, contain, understand root cause and infection vector of said user account/s, networked equipment or computer/s. This report pertains to all incidents reported by TIER II help desk, TIER III engineers, customer complaints or random IT Security audit/finding/pen test.
Tags: part report malware networked-equipment static-analysis tier-ii

15:54
Malware Reverse Engineering Part 1 - Static Analysis
» ‎ Packet Storm Security Misc. Files

This malware report is part 1 of 2. This report is an effort to track, categorize, contain, understand root cause and infection vector of said user account/s, networked equipment or computer/s. This report pertains to all incidents reported by TIER II help desk, TIER III engineers, customer complaints or random IT Security audit/finding/pen test.
Tags: part report malware networked-equipment static-analysis tier-ii

January 16, 2012
9:08
Hackers Spread Malware Via Children's Gaming Sites
» ‎ Packet Storm Security Headlines

Hackers Spread Malware Via Children's Gaming Sites
Tags: hackers spread malware gaming-sites

January 15, 2012
21:31
[Paper] Combatting Symbian Malware
» ‎ SecDocs

Authors: Jarno Niemelä
Tags: malware phone
Event: Black Hat EU 2006

Tags: malware symbian paper black-hat
January 14, 2012
21:34
[Slides] Combatting Symbian Malware
» ‎ SecDocs

Authors: Jarno Niemelä
Tags: malware phone
Event: Black Hat EU 2006

Tags: authors malware symbian black-hat slides
January 13, 2012
21:49
[Slides] Malware Cinema: A Picture is Worth a Thousand Packets
» ‎ SecDocs

Authors: Gregory Conti
Tags: malware
Event: Black Hat EU 2006

Tags: cinema malware picture gregory-conti black-hat conti slides
January 09, 2012
21:35
[Slides] RFID Malware Demystified
» ‎ SecDocs

Authors: Melanie Rieback
Tags: RFID
Event: Black Hat USA 2006

Tags: malware demystified rfid melanie-rieback usa black-hat slides
January 06, 2012
21:49
[Slides] Hacking Intranet Websites from the Outside "JavaScript malware just got a lot more dangerous"
» ‎ SecDocs

Authors: Jeremiah Grossman
Tags: web application malware Javascript
Event: Black Hat USA 2006

Tags: malware javascript hacking jeremiah-grossman usa intranet-websites black-hat

January 05, 2012
8:38
Ramnit Worm Stealing Facebook Account Passwords, E-mail Address & Bank Details
» ‎ Darknet

Oh look, another Facebook worm – this one seems pretty nasty and as usual it’s going for Facebook access details and then diving into banking credentials if it can find them. It’s mostly targeted at the UK though, worms of these type usually are geographically limited as they are targeting bank information – it’s...

Read the full post at darknet.org.uk

Tags: facebook worm bank read e-mail-address account-passwords bank-information malware

January 01, 2012
21:35
[Slides] Catching Malware to Detect, Track and Mitigate Botnets
» ‎ SecDocs

Authors: Georg Wicherski Thorsten Holz
Tags: malware botnet
Event: Black Hat Asia 2006

Tags: track detect malware georg-wicherski thorsten-holz asia black-hat thorsten

December 23, 2011
8:32
Amnesty International UK Compromised, Serving Exploits And Malware
» ‎ Packet Storm Security Headlines

Amnesty International UK Compromised, Serving Exploits And Malware
Tags: international compromised amnesty amnesty-international-uk malware exploits
December 14, 2011
18:36
Android Malware Hits Million Users In First Half Of 2011
» ‎ Packet Storm Security Headlines

Android Malware Hits Million Users In First Half Of 2011
Tags: malware android hits

December 09, 2011
7:59
[Paper] Hide 'n' Seek? Anatomy of Stealth Malware
» ‎ SecDocs

Authors: Gergely Erdelyi
Tags: malware
Event: Black Hat EU 2004

Tags: anatomy malware paper hide black-hat stealth
7:57
[Slides] Hide 'n' Seek? Anatomy of Stealth Malware
» ‎ SecDocs

Authors: Gergely Erdelyi
Tags: malware
Event: Black Hat EU 2004

Tags: anatomy malware stealth hide black-hat

December 08, 2011
8:17
Download.com Adding Malware To Nmap
» ‎ Packet Storm Security Advisories

This is Fyodor's latest update on the CNET Download.com fiasco where they are packaging third party software with their own additions.
Tags: download malware com fyodor third-party-software fiasco

8:17
Download.com Adding Malware To Nmap
» ‎ Packet Storm Security Recent Files

This is Fyodor's latest update on the CNET Download.com fiasco where they are packaging third party software with their own additions.
Tags: download malware com fyodor third-party-software fiasco

8:17
Download.com Adding Malware To Nmap
» ‎ Packet Storm Security Misc. Files

This is Fyodor's latest update on the CNET Download.com fiasco where they are packaging third party software with their own additions.
Tags: download malware com fyodor third-party-software fiasco

December 07, 2011
8:07
Using Google As A Malware Spreading Technique
» ‎ Packet Storm Security Recent Files

This is a short whitepaper discussing how to use Google as a malware spreading tool.
Tags: malware google spreading whitepaper

8:07
Using Google As A Malware Spreading Technique
» ‎ Packet Storm Security Misc. Files

This is a short whitepaper discussing how to use Google as a malware spreading tool.
Tags: malware google spreading whitepaper

December 06, 2011
21:22
Android's Popularity Makes It Open Target For Malware, Says Study
» ‎ Packet Storm Security Headlines

Android's Popularity Makes It Open Target For Malware, Says Study
Tags: makes popularity android open-target malware
December 03, 2011
10:56
Malware Writers Launch 'Electronic Payment' Malware Attack
» ‎ Packet Storm Security Headlines

Malware Writers Launch 'Electronic Payment' Malware Attack
Tags: launch malware writers electronic-payment
November 29, 2011
21:33
Zeus Malware Takes To Facebook For New Victims
» ‎ Packet Storm Security Headlines

Zeus Malware Takes To Facebook For New Victims
Tags: facebook new takes zeus-malware zeus malware
November 16, 2011
7:51
Android Leads The Way In Mobile Malware
» ‎ Packet Storm Security Headlines

Android Leads The Way In Mobile Malware
Tags: mobile malware android the-way
November 15, 2011
7:27
Mystery Malware Poisons NZ Ambulance System
» ‎ Packet Storm Security Headlines

Mystery Malware Poisons NZ Ambulance System
Tags: poisons mystery malware ambulance-system
7:26
Mobile Malware And Targeted Attacks To Proliferate In 2012
» ‎ Packet Storm Security Headlines

Mobile Malware And Targeted Attacks To Proliferate In 2012
Tags: mobile targeted malware

November 14, 2011
7:53
Hook Analyser Malware Tool 1.3
» ‎ Packet Storm Security Recent Files

Hook analyser is a hook tool which can be potentially helpful in reversing applications and analysing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.
Tags: analyser hook malware hook-tool tool-1 analysing

7:53
Hook Analyser Malware Tool 1.3
» ‎ Packet Storm Security Tools

Hook analyser is a hook tool which can be potentially helpful in reversing applications and analysing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.
Tags: analyser hook malware hook-tool tool-1 analysing

7:53
Hook Analyser Malware Tool 1.3
» ‎ Packet Storm Security Misc. Files

Hook analyser is a hook tool which can be potentially helpful in reversing applications and analysing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.
Tags: analyser hook malware hook-tool tool-1 analysing

7:32
Freebie Android Anti-Malware Scanners Flunk Test
» ‎ Packet Storm Security Headlines

Freebie Android Anti-Malware Scanners Flunk Test
Tags: malware android freebie anti-malware scanners

November 13, 2011
21:52
[Slides] Neutralizing Nimda: Automated Strikeback
» ‎ SecDocs

Authors: Tim Mullen
Tags: malware virus malware analysis
Event: Black Hat Asia 2002

Tags: neutralizing malware nimda tim-mullen asia black-hat slides

November 07, 2011
8:01
Bugtraq: Malware detection evasion in antivirus software
» ‎ SecurityFocus Vulnerabilities

Malware detection evasion in antivirus software
Tags: evasion malware detection

7:27
Antivirus Software Bypass
» ‎ Packet Storm Security Advisories

Various antivirus software on Windows fails to detect, block and/or move malware if the executable file has only execution permission and no read, write, or other bits set.
Tags: antivirus bypass Software executable-file malware execution

7:27
Antivirus Software Bypass
» ‎ Packet Storm Security Recent Files

Various antivirus software on Windows fails to detect, block and/or move malware if the executable file has only execution permission and no read, write, or other bits set.
Tags: antivirus bypass Software executable-file malware execution

7:27
Antivirus Software Bypass
» ‎ Packet Storm Security Misc. Files

Various antivirus software on Windows fails to detect, block and/or move malware if the executable file has only execution permission and no read, write, or other bits set.
Tags: antivirus bypass Software executable-file malware execution

7:22
Smartphone Scams: Owners Warned Over Malware Apps
» ‎ Packet Storm Security Headlines

Smartphone Scams: Owners Warned Over Malware Apps
Tags: smartphone malware scams apps
October 31, 2011
8:49
Don't Let Halloween Malware Haunt Your PC
» ‎ Packet Storm Security Headlines

Don't Let Halloween Malware Haunt Your PC
Tags: malware don halloween
October 28, 2011
14:10
Tsunami Trojan Malware Bot Ported To OS X
» ‎ Packet Storm Security Headlines

Tsunami Trojan Malware Bot Ported To OS X
Tags: tsunami malware trojan os-x
October 15, 2011
17:13
Drone Nerve Centre Malware Was Mafia Wars' Infostealer
» ‎ Packet Storm Security Headlines

Drone Nerve Centre Malware Was Mafia Wars' Infostealer
Tags: nerve malware centre mafia-wars nerve-centre drone

October 10, 2011
2:23
[Slides] Latest Advances in Honeynet Technologies
» ‎ SecDocs

Tags: malware analysis honeypot
Event: Black Hat USA 2003

Tags: malware honeynet tags usa black-hat slides
October 05, 2011
5:14
[Slides] Latest Advances in Honeynet Technologies
» ‎ SecDocs

Tags: malware analysis honeypot
Event: Black Hat Federal 2003

Tags: malware honeynet tags black-hat slides

October 03, 2011
16:33
Malware Analyser 3.3
» ‎ Packet Storm Security Recent Files

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: dynamic-analysis malware

16:33
Malware Analyser 3.3
» ‎ Packet Storm Security Tools

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis
16:33
Malware Analyser 3.3
» ‎ Packet Storm Security Tools

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

16:33
Malware Analyser 3.3
» ‎ Packet Storm Security Misc. Files

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

September 30, 2011
11:11
[Slides] Honeypots Against Worms 101
» ‎ SecDocs

Authors: Laurent Oudot
Tags: malware malware analysis honeypot
Event: Black Hat Asia 2003

Tags: malware authors honeypots laurent-oudot asia black-hat worms

September 26, 2011
23:02
MySQL.com Compromised & Spreading Malware
» ‎ Darknet

The latest story doing the rounds is that MySQL.com got hacked and was serving malware which put it on the Google malware block list. It appears to be in the clear now though and it’s accessible again via Google. It seems to be a similar case with that of the recent Linux.com and Kernel.org hacks [...]

Read the full post at darknet.org.uk

Tags: malware com mysql read doing-the-rounds darknet google database hacking

14:28
Mac Malware Discovered Hidden Inside PDF
» ‎ Packet Storm Security Headlines

Mac Malware Discovered Hidden Inside PDF
Tags: hidden pdf discovered mac-malware malware

13:18
[Slides] dirtbox, a highly scalable x86/Windows Emulator
» ‎ SecDocs

Authors: Georg Wicherski
Tags: virtual machine malware malware analysis
Event: Black Hat USA 2010
Abstract: The increasing amount of new malware each day does not only put anti-virus companies up to new limits handling these samples for detection by creating new signatures. But also for network security providers and administrators, getting information on how samples affect the networks they try to protect is an increasing problem. Dynamic analysis of malware by execution in sandboxes has been an approach that has been successfully applied in both of these problem scenarios, however classic sandbox approaches clearly suffer from severe scalability problems. Most of these rely on setting up a real target system such as the Windows XP operating system as a virtual machine with additional software that does logging of performed actions. While these are easy to develop and set up, they require a separate virtual machine instance for each malware sample to be analyzed and therefore do not scale up with today's requirements in terms of malware growth. Anti-Virus vendors tried to circumvent performance issues for file analysis by developing custom emulators that can be deployed on a customer end-host for detection and do not require a whole operating system inside a virtual machine. These emulators however often are software interpreters for the x86 instruction set and run therefore into execution speed limitations on their own. Additionally, they suffer from detectability because they try to emulate every single Windows API but suffer from accuracy issues. dirtbox is an attempt to implement a highly scalable x86/Windows emulator that can be both used for simple malware detection and detailed behavior analysis reports. Instead of emulating every single x86 instruction in software, malware instructions are executed directly on the host CPU in a per basic block fashion. A disassembling run on each basic block ensures that no privileged or control flow subverting instructions are executed. The notion of virtual memory that is separated from the emulators memory is employed by special LDT segments and switching segment selectors before executing guest instructions. Since no instrumentation alike instruction rewriting is being done, disassembler results per basic block can be cached and all execution happens in the same process without context-switches, a high grade of performance is achieved. The operating system is emulated at the syscall layer. While this layer is mostly undocumented and implementing it in an accurate fashion is a challenging task on its own, the fact that no register changes are leaked from Ring 0 thwarts a lot of detection techniques. For usage of the high-level APIs, corresponding libraries are directly mapped into the virtual memory as well.
Tags: malware machine windows georg-wicherski usa classic-sandbox target-system problem-scenarios
September 20, 2011
11:15
[Paper] Malware Freak Show 2010: The Client-Side Boogaloo
» ‎ SecDocs

Authors: Jibran Ilyas Nicholas J. Percoco
Tags: malware cybercrime malware analysis
Event: Black Hat USA 2010
Abstract: We had a busy year. We investigated over 200 incidents in 24 different countries. We ended up collecting enough malware freaks [samples] to fill up Kunstkammer a few times over. Building upon last year's DEFCON talk, we want to dive deeper and bring you the most interesting samples from around the world - including one that made international headlines and the rest we're positive no one's ever seen before (outside of us and the kids who wrote them). This talk will bring you 4 new freaks and 4 new victims including: a Sports Bar in Miami, Online Adult Toy Store, US Defense Contractor, and an International VoiP Provider. The malware we are going to demo are very advanced pieces of software written by very skilled developers. The complexity in their propagation, control channels, anti-forensic techniques and data exporting properties will be very interesting to anyone interested in this topic.
Tags: talk year malware nicholas-j.-percoco usa miami adult-toy-store skilled-developers freak-show
11:15
[Slides] Malware Freak Show 2010: The Client-Side Boogaloo
» ‎ SecDocs

Authors: Jibran Ilyas Nicholas J. Percoco
Tags: malware cybercrime malware analysis
Event: Black Hat USA 2010
Abstract: We had a busy year. We investigated over 200 incidents in 24 different countries. We ended up collecting enough malware freaks [samples] to fill up Kunstkammer a few times over. Building upon last year's DEFCON talk, we want to dive deeper and bring you the most interesting samples from around the world - including one that made international headlines and the rest we're positive no one's ever seen before (outside of us and the kids who wrote them). This talk will bring you 4 new freaks and 4 new victims including: a Sports Bar in Miami, Online Adult Toy Store, US Defense Contractor, and an International VoiP Provider. The malware we are going to demo are very advanced pieces of software written by very skilled developers. The complexity in their propagation, control channels, anti-forensic techniques and data exporting properties will be very interesting to anyone interested in this topic.
Tags: talk year malware nicholas-j.-percoco usa miami adult-toy-store skilled-developers freak-show
September 16, 2011
0:26
[Slides] App Attack: Surviving the Mobile Application Explosion
» ‎ SecDocs

Authors: Kevin Mahaffey John Hering
Tags: malware malware analysis phone
Event: Black Hat USA 2010
Abstract: The mobile app revolution is upon us. Applications on your smartphone know more about you than anyone or anything else in the world. Apps know where you are, who you talk to, and what you're doing on the web; they have access to your financial accounts, can trigger charges to your phone bill, and much more. Have you ever wondered what smartphone apps are actually doing under the hood? We built the largest-ever mobile application security dataset to find out. Mobile apps have grown tremendously both in numbers and capabilities over the past few years with hundreds of thousands of apps and billions of downloads. Such a wealth of data and functionality on each phone and a massive proliferation of apps that can access them are driving a new wave of security implications. Over the course of several months, we gathered both application binaries and meta-data about applications on the most popular smartphone platforms and built tools to analyze the data en masse. The results were surprising. Not only do users have very little insight into what happens in their apps, neither do the developers of the applications themselves. In this talk we're going to share the results of our research, demonstrate a new class of mobile application vulnerability, show how we can quickly find out if anyone in the wild is exploiting it, and discuss the future of mobile application security and mobile malware.
Tags: malware application phone usa massive-proliferation application-binaries mobile-apps

September 15, 2011
11:37
Security Firms: Android Malware Set To Skyrocket
» ‎ Packet Storm Security Headlines

Security Firms: Android Malware Set To Skyrocket
Tags: malware android security security-firms

September 13, 2011
7:29
Hook Analyser Malware Tool
» ‎ Packet Storm Security Recent Files

Hook analyser is a hook tool which can be potentially helpful in reversing applications and analysing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.
Tags: analyser hook malware hook-tool analysing api

7:29
Hook Analyser Malware Tool
» ‎ Packet Storm Security Misc. Files

Hook analyser is a hook tool which can be potentially helpful in reversing applications and analysing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.
Tags: analyser hook malware hook-tool analysing api

September 11, 2011
7:17
[Slides] You will be billed $90,000 for this call
» ‎ SecDocs

Authors: Mikko Hypponen
Tags: malware phone
Event: Black Hat USA 2010
Abstract: Computers do not have a built-in billing system. Phones do: it's called the phone bill. We have already seen the first examples of money-making malware that infects various types of smartphones. This talk will go into details of the currently known smartphone trojans that either place calls or send text messages to expensive premium-rate numbers. How does this work technically? Which platforms are at risk? What kind of premium-rate numbers are the criminals using? How do they route the money back to them without getting caught? And what can we do about this before it gets worse?
Tags: malware phone call usa premium-rate-numbers system-phones black-hat
September 08, 2011
10:41
[Paper] mod_antimalware: a novel apache module for containing web-based malware infections
» ‎ SecDocs

Authors: Neil Daswani
Tags: malware web server Apache
Event: Black Hat USA 2010
Abstract: Drive-by downloads planted on legitimate sites (e.g., via "structural" and other vulnerabilities in web applications) cause web sites to get blacklisted by Google, Yahoo, and other search engines and browsers. In this talk, I describe the technical architecture and implementation of mod_antimalware, a novel, open-source containment technology for web servers that can be used to 1) quarantine web-based malware infections before they impact users, 2) allow web pages to safely be served even while a site is infected, and 3) give webmasters time to recover from an attack before their web sites get blacklisted by popular search engines and browsers.
Tags: malware web mod neil-daswani usa web-server-apache other-search-engines
10:41
[Slides] mod_antimalware: a novel apache module for containing web-based malware infections
» ‎ SecDocs

Authors: Neil Daswani
Tags: malware web server Apache
Event: Black Hat USA 2010
Abstract: Drive-by downloads planted on legitimate sites (e.g., via "structural" and other vulnerabilities in web applications) cause web sites to get blacklisted by Google, Yahoo, and other search engines and browsers. In this talk, I describe the technical architecture and implementation of mod_antimalware, a novel, open-source containment technology for web servers that can be used to 1) quarantine web-based malware infections before they impact users, 2) allow web pages to safely be served even while a site is infected, and 3) give webmasters time to recover from an attack before their web sites get blacklisted by popular search engines and browsers.
Tags: malware web mod neil-daswani usa web-server-apache other-search-engines

7:29
Non-Financial Malware Is Being Repurposed For Fraud
» ‎ Packet Storm Security Headlines

Non-Financial Malware Is Being Repurposed For Fraud
Tags: malware financial NON fraud

September 07, 2011
19:23
Dissecting Andro Malware
» ‎ Packet Storm Security Recent Files

This white paper aims to understand the operation of an Android malware named "*DroidKungFu 2 - A*" and investigate the parameters, code and structure which is created or modified by this malware. It also highlights the mitigation steps which requires the user and the developer to be proactive.
Tags: andro dissecting malware mitigation-steps android

19:23
Dissecting Andro Malware
» ‎ Packet Storm Security Misc. Files

This white paper aims to understand the operation of an Android malware named "*DroidKungFu 2 - A*" and investigate the parameters, code and structure which is created or modified by this malware. It also highlights the mitigation steps which requires the user and the developer to be proactive.
Tags: andro dissecting malware mitigation-steps android

September 05, 2011
13:13
[Slides] Goodware drugs for malware: on-the-fly malware analysis and containment
» ‎ SecDocs

Authors: Christiaan Schade Damiano Bolzoni
Tags: malware malware analysis
Event: Black Hat USA 2010
Abstract: In this presentation we will show a new approach to perform on-the-fly malware analysis (even of previously unknown malware), without the need of deploying any instrumentation at the end host before hand. Our approach leverages the fact that malware quite often comes as a small (in size) "spore", which is then responsible for making the malware persistent on the targeted host and download additional components ("eggs"). Eggs usually come in the shape of executables or DLLs, and extend the capabilities of the spore (password grabbing, URL redirection, etc.) Our system, we call it Avatar, detect failed attempts to download eggs, and ships back to the suspected malware what we call a "red pill". When the malware executes the red pill, this performs some preliminary checks and can send to an instrumented host a copy of the parent process' executable. In this instrumented (i.e., sand-boxed) environment it is possible to perform real-time analysis of the suspicious program. The red pill can be then remotely instrumented to terminate the monitored process, in case it appears to be a real threat. By doing so, it is possible to effectively contain a large infection.
Tags: malware analysis host usa time-analysis black-hat
September 04, 2011
2:57
[Slides] Virt-ICE: next generation debugger for malware analysis
» ‎ SecDocs

Authors: Kuniyasu Suzaki Quynh Nguyen Anh
Tags: malware debugger malware analysis
Event: Black Hat USA 2010
Abstract: Dynamic malware analysis is an important method to analyze malware. The most important tool for dynamic malware analysis is debugger. However, because debuggers are originally built by software developers to debug legitimate software, they have some significant flaws against malware. First of all, malware can easily detect the presence of debugger with various tricks. Another fundamental problem is that because malware run in the same security domain with debugger, they can potentially tamper with the debugger, and prevent it from functioning correctly. Unfortunately, all of the above drawbacks are unfixable in the current architecture. This research presents a new debugger named Virt-ICE, which is designed to address the problems of current malware debuggers. Using virtualization technology, Virt-ICE is totally invisible to malware, thus renders most available anti-debugging techniques useless. Thanks to the isolation provided by virtual machine, Virt-ICE is out of the reach of malware, and cannot be tampered with. Another advantage of Virt-ICE is that unlike many other popular debuggers, it can deal with ring-0 code, therefore it has no issue handling kernel rootkits. Virt-ICE also offers a novel event-based method to intercept malware execution, which can help to improve the debugging efficiency. Finally, Virt-ICE includes some built-in automatic malware analysis facilities to give the analysts more information on malware, so they can reduce the time on the job by focusing their debugging efforts on important points. We conclude the talk with some live demos to show how Virt-ICE can debug some real malware.
Tags: malware ice debugger usa quynh-nguyen nguyen-anh current-architecture

August 29, 2011
19:03
Malheur Malware Analyzer 0.5.2
» ‎ Packet Storm Security Recent Files

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

19:03
Malheur Malware Analyzer 0.5.2
» ‎ Packet Storm Security Tools

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

19:03
Malheur Malware Analyzer 0.5.2
» ‎ Packet Storm Security Misc. Files

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

August 27, 2011
10:01
[Video] Apple iOS 4 Privacy
» ‎ SecDocs

Authors: Nicolas Seriot
Tags: malware iPhone rootkit
Event: Hashdays 2010
Abstract: Apple's AppStore moves the burden of security management from the user to the vendor. Apple semi-automatically verifies each of the 200.000 applications and their updates. Moreover, when an application is downloaded on the iPhone, a sandboxing mechanism is supposed to prevent it from reading other applications' data. We showed at Black Hat DC 2010 that such a schema did not prevent malware from reaching the App Store and harvesting personal data. This talk will discuss the current state of iOS 4 privacy and show to what extent iOS 4 fixes the issues raised earlier this year. We will also present some findings about another possible frauds happening inside the App Store eco-system such as "App Farms", which basically consists in artificially boosting applications ratings with stolen accounts.
Tags: malware privacy app apple-ios nicolas-seriot ios iphone black-hat security-management
10:01
[Slides] Apple iOS 4 Privacy
» ‎ SecDocs

Authors: Nicolas Seriot
Tags: malware iPhone rootkit
Event: Hashdays 2010
Abstract: Apple's AppStore moves the burden of security management from the user to the vendor. Apple semi-automatically verifies each of the 200.000 applications and their updates. Moreover, when an application is downloaded on the iPhone, a sandboxing mechanism is supposed to prevent it from reading other applications' data. We showed at Black Hat DC 2010 that such a schema did not prevent malware from reaching the App Store and harvesting personal data. This talk will discuss the current state of iOS 4 privacy and show to what extent iOS 4 fixes the issues raised earlier this year. We will also present some findings about another possible frauds happening inside the App Store eco-system such as "App Farms", which basically consists in artificially boosting applications ratings with stolen accounts.
Tags: malware privacy app apple-ios nicolas-seriot ios iphone black-hat security-management

August 25, 2011
16:04
Demystifying The Android Malware
» ‎ Packet Storm Security Recent Files

Whitepaper called Demystifying the Android Malware. It dives into various phases to discuss the hows and whys behind malware implementation for Android.
Tags: malware android demystifying whys implementation

16:04
Demystifying The Android Malware
» ‎ Packet Storm Security Misc. Files

Whitepaper called Demystifying the Android Malware. It dives into various phases to discuss the hows and whys behind malware implementation for Android.
Tags: malware android demystifying whys implementation

August 24, 2011
17:39
Malheur Malware Analyzer 0.5.1
» ‎ Packet Storm Security Recent Files

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

17:39
Malheur Malware Analyzer 0.5.1
» ‎ Packet Storm Security Tools

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

17:39
Malheur Malware Analyzer 0.5.1
» ‎ Packet Storm Security Misc. Files

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

August 23, 2011
19:54
Malware Threat On Android Continues To Grow
» ‎ Packet Storm Security Headlines

Malware Threat On Android Continues To Grow
Tags: threat malware android
August 17, 2011
7:22
Spyeye Malware Source Code Is Leaked
» ‎ Packet Storm Security Headlines

Spyeye Malware Source Code Is Leaked
Tags: spyeye malware source source-code
August 16, 2011
20:33
Malware Mints Virtual Currency Using Victim's GPU
» ‎ Packet Storm Security Headlines

Malware Mints Virtual Currency Using Victim's GPU
Tags: malware mints virtual virtual-currency gpu
August 11, 2011
8:49
Love Lure Malware Turns Up At Android Marketplace
» ‎ Packet Storm Security Headlines

Love Lure Malware Turns Up At Android Marketplace
Tags: love malware android marketplace

August 09, 2011
13:52
[Paper] Exploting Similarity Between Variants to Defeat Malware
» ‎ SecDocs

Authors: Andrew Walenstein
Tags: malware malware analysis
Event: Black Hat DC 2007

Tags: exploting malware paper andrew-walenstein black-hat similarity variants
13:52
[Slides] Exploting Similarity Between Variants to Defeat Malware
» ‎ SecDocs

Authors: Andrew Walenstein
Tags: malware malware analysis
Event: Black Hat DC 2007

Tags: similarity exploting malware andrew-walenstein black-hat variants
August 01, 2011
12:58
[Paper] Botnet Tracking: Tools, Techniques, and Lessons Learned
» ‎ SecDocs

Authors: Jose Nazario
Tags: malware botnet malware analysis
Event: Black Hat DC 2007

Tags: malware botnet paper jose jose-nazario tracking-tools black-hat
12:55
[Slides] Botnet Tracking: Tools, Techniques, and Lessons Learned
» ‎ SecDocs

Authors: Jose Nazario
Tags: malware botnet malware analysis
Event: Black Hat DC 2007

Tags: malware botnet tracking jose jose-nazario tracking-tools black-hat
July 29, 2011
13:56
[Paper] Practical Malware Analysis: Fundamental Techniques and a New Method for Malware Discovery
» ‎ SecDocs

Authors: Chad McMillan Kris Kendall
Tags: malware malware analysis
Event: Black Hat DC 2007

Tags: analysis malware paper chad fundamental-techniques black-hat kendall
13:55
[Slides] Practical Malware Analysis: Fundamental Techniques and a New Method for Malware Discovery
» ‎ SecDocs

Authors: Chad McMillan Kris Kendall
Tags: malware malware analysis
Event: Black Hat DC 2007

Tags: practical analysis malware chad fundamental-techniques black-hat kendall

July 22, 2011
7:32
Japanese Man Jailed For Fishy Ika Tako Manga Malware
» ‎ Packet Storm Security Headlines

Japanese Man Jailed For Fishy Ika Tako Manga Malware
Tags: fishy jailed man japanese-man malware ika
July 20, 2011
7:33
Google Now Checks Your Computer For Malware
» ‎ Packet Storm Security Headlines

Google Now Checks Your Computer For Malware
Tags: now malware google

July 16, 2011
8:25
Malware Analyser 3.2
» ‎ Packet Storm Security Recent Files

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

8:25
Malware Analyser 3.2
» ‎ Packet Storm Security Tools

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

8:25
Malware Analyser 3.2
» ‎ Packet Storm Security Misc. Files

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

July 14, 2011
15:08
Gordon Brown Claims Murdoch Staff Also Used Malware To Hack PCs
» ‎ Packet Storm Security Headlines

Gordon Brown Claims Murdoch Staff Also Used Malware To Hack PCs
Tags: malware used hack gordon-brown-claims murdoch-staff gordon-brown
July 11, 2011
19:47
More Malware Targeting Android
» ‎ Packet Storm Security Headlines

More Malware Targeting Android
Tags: targeting malware android
7:05
PC Components Sometimes Preloaded With Malware, Says Official
» ‎ Packet Storm Security Headlines

PC Components Sometimes Preloaded With Malware, Says Official
Tags: official malware preloaded pc-components

July 05, 2011
7:50
Fake Malware And Virus Scanners
» ‎ Packet Storm Security Recent Files

Whitepaper called Fake Malware and Virus Scanners. Rogue security software reports a virus infection, even if your computer is clean. This kind of "software" could also fail to report viruses when your computer is infected. This document show what are the mechanisms to obfuscate this process.
Tags: virus fake malware virus-scanners virus-infection

7:50
Fake Malware And Virus Scanners
» ‎ Packet Storm Security Misc. Files

Whitepaper called Fake Malware and Virus Scanners. Rogue security software reports a virus infection, even if your computer is clean. This kind of "software" could also fail to report viruses when your computer is infected. This document show what are the mechanisms to obfuscate this process.
Tags: virus-scanners virus-infection malware

July 04, 2011
4:06
Security Researchers Discover 4 Million Strong ‘Indestructible’ Botnet – TDSS/TDL
» ‎ Darknet

It’s been recently uncovered that there’s a HUGE botnet, which is extremely advanced and constantly evolving a variant of the ever popular (and usually quite advanced) TDL strain. We did write about a TDL variant earlier in 2010 – TDL AKA Alureon Rootkit Now Infecting 64-Bit Windows 7 Platform. TDL itself has been around several...

Read the full post at darknet.org.uk

Tags: botnet variant tdl read aka-alureon security-researchers darknet 64-bit-windows malware

June 30, 2011
14:35
[Slides] Observing the Tidal Waves of Malware
» ‎ SecDocs

Authors: Stefano Zanero
Tags: malware malware analysis
Event: Black Hat USA 2007

Tags: waves malware tidal stefano-zanero usa tidal-waves black-hat slides

June 12, 2011
11:40
Malware Analyser 3.1
» ‎ Packet Storm Security Recent Files

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

11:40
Malware Analyser 3.1
» ‎ Packet Storm Security Tools

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

11:40
Malware Analyser 3.1
» ‎ Packet Storm Security Misc. Files

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

June 09, 2011
10:07
DroidKungFu Malware Discovered On Android Platform
» ‎ Packet Storm Security Headlines

DroidKungFu Malware Discovered On Android Platform
Tags: droidkungfu malware discovered
May 31, 2011
23:41
Malware From Google Market Menaces Android Users
» ‎ Packet Storm Security Headlines

Malware From Google Market Menaces Android Users
Tags: google market malware
23:41
Apple Ships Removal Tool For Mac Menacing Malware
» ‎ Packet Storm Security Headlines

Apple Ships Removal Tool For Mac Menacing Malware
Tags: malware tool removal apple-ships mac-menacing removal-tool
May 24, 2011
23:58
Apple Opens Up About Mac Defender Malware Infections
» ‎ Packet Storm Security Headlines

Apple Opens Up About Mac Defender Malware Infections
Tags: infections malware apple-opens mac-defender apple

May 23, 2011
4:27
Malware Analyser v3.0 – A Static & Dynamic Malware Analysis Tool
» ‎ Darknet

Malware Analyser is freeware tool to perform static and dynamic analysis on malware executables, it can be used to identify potential traces of anti-debug, keyboard hooks, system hooks and DEP setting change calls in the malware. This is a stepping release since for the first time the Dynamic Analysis has been included for file creations [...]

Read the full post at darknet.org.uk

Tags: analyser analysis malware read dynamic-analysis darknet analysis-tool Countermeasures

May 19, 2011
21:04
Hacker Mind Tricks Increasing Malware Downloads
» ‎ Packet Storm Security Headlines

Hacker Mind Tricks Increasing Malware Downloads
Tags: hacker malware tricks mind-tricks downloads

May 18, 2011
13:16
[Paper] Status of Cell Phone Malware in 2007
» ‎ SecDocs

Authors: Mikko Hypponen
Tags: malware phone
Event: Black Hat USA 2007

Tags: malware phone paper usa black-hat cell-phone
13:15
[Slides] Status of Cell Phone Malware in 2007
» ‎ SecDocs

Authors: Mikko Hypponen
Tags: malware phone
Event: Black Hat USA 2007

Tags: malware phone status usa black-hat slides
May 11, 2011
15:10
[Paper] Stealth Secrets of the Malware Ninjas
» ‎ SecDocs

Authors: Nick Harbour
Tags: forensic malware malware analysis
Event: Black Hat USA 2007

Tags: malware stealth paper nick-harbour usa stealth-secrets black-hat forensic

May 10, 2011
7:35
Canada Moves Up In Malware Badness List
» ‎ Packet Storm Security Headlines

Canada Moves Up In Malware Badness List
Tags: moves badness malware canada

May 03, 2011
7:04
Osama Malware Scams Spread To Facebook
» ‎ Packet Storm Security Headlines

Osama Malware Scams Spread To Facebook
Tags: malware osama scams

April 27, 2011
18:04
Love Bug Malware Inspired Film Gets Big Screen Premiere
» ‎ Packet Storm Security Headlines

Love Bug Malware Inspired Film Gets Big Screen Premiere
Tags: bug inspired malware love
April 26, 2011
8:49
Android Malware Sees Explosive Growth
» ‎ Packet Storm Security Headlines

Android Malware Sees Explosive Growth
Tags: sees malware android explosive-growth

April 21, 2011
4:01
DoJ and FBI now issuing command to botnet malware
» ‎ Hack a Day

Looks like the FBI is starting to get pretty serious about fighting malware. Traditionally they have attacked the servers that activate and control botnets made up of infected computers. This time they’re going much further by taking control of and issuing commands to the botnets. In this instance it’s a nasty little bug called Coreflood, [...]
Tags: malware fbi control little-bug doj security hacks

April 20, 2011
18:38
Malware Analyser 3.0
» ‎ Packet Storm Security Recent Files

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

18:38
Malware Analyser 3.0
» ‎ Packet Storm Security Tools

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

18:38
Malware Analyser 3.0
» ‎ Packet Storm Security Misc. Files

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

April 19, 2011
18:58
Malheur Malware Analyzer 0.5.0
» ‎ Packet Storm Security Recent Files

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

18:58
Malheur Malware Analyzer 0.5.0
» ‎ Packet Storm Security Tools

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

18:58
Malheur Malware Analyzer 0.5.0
» ‎ Packet Storm Security Misc. Files

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

April 13, 2011
13:39
[Paper] Malware Distribution via Widgetization of the Web
» ‎ SecDocs

Authors: Neil Daswani
Tags: malware
Event: Black Hat DC 2011
Abstract: The Web 2.0 transformation has in part involved many sites using third-party widgets. We present the "widgetized web graph" showing the structure of high traffic web sites from the standpoint of widgets, show how web-based malware and scareware is propagated via such widgets, and provide data on how a mass web-based malware attack can take place against the Quantcast 1000 web sites via widgets.
Tags: malware web paper neil-daswani web-graph mass-web

April 11, 2011
7:20
UK Police Arrest Three Men Over SpyEye Malware
» ‎ Packet Storm Security Headlines

UK Police Arrest Three Men Over SpyEye Malware
Tags: police three arrest uk-police-arrest malware three-men
April 05, 2011
19:20
Surge In Malware Marks Start Of Year
» ‎ Packet Storm Security Headlines

Surge In Malware Marks Start Of Year
Tags: marks malware surge
March 31, 2011
20:08
New Android Malware Targets App Pirates
» ‎ Packet Storm Security Headlines

New Android Malware Targets App Pirates
Tags: new malware android pirates
March 25, 2011
8:42
Spotify Splattered With Malware Tainted Ads
» ‎ Packet Storm Security Headlines

Spotify Splattered With Malware Tainted Ads
Tags: spotify splattered malware
March 19, 2011
7:12
Hacker Gets 9 Years For Hospital Malware
» ‎ Packet Storm Security Headlines

Hacker Gets 9 Years For Hospital Malware
Tags: hacker years gets malware
March 16, 2011
15:52
Microsoft Malware Removal Tool Takes Out Public Enemy No. 4
» ‎ Packet Storm Security Headlines

Microsoft Malware Removal Tool Takes Out Public Enemy No. 4
Tags: microsoft malware removal malware-removal-tool microsoft-malware-removal-tool microsoft-malware-removal

March 15, 2011
22:25
[Audio] Malware Freak Show 2: The Client-Side Boogaloo
» ‎ SecDocs

Authors: Jibran Ilyas Nicholas J. Percoco
Tags: malware cybercrime
Event: DEFCON 18

Tags: audio freak malware nicholas-j.-percoco
22:25
[Slides] Malware Freak Show 2: The Client-Side Boogaloo
» ‎ SecDocs

Authors: Jibran Ilyas Nicholas J. Percoco
Tags: malware cybercrime
Event: DEFCON 18

Tags: show freak malware nicholas-j.-percoco slides
22:25
[Video] Malware Freak Show 2: The Client-Side Boogaloo
» ‎ SecDocs

Authors: Jibran Ilyas Nicholas J. Percoco
Tags: malware cybercrime
Event: DEFCON 18

Tags: video freak malware nicholas-j.-percoco freak-show

March 10, 2011
6:40
Router Rooting Malware Pwns Linux Based Network Devices
» ‎ Packet Storm Security Headlines

Router Rooting Malware Pwns Linux Based Network Devices
Tags: router rooting malware linux
March 09, 2011
19:12
DDoS Malware Comes With Self Destruct Payload
» ‎ Packet Storm Security Headlines

DDoS Malware Comes With Self Destruct Payload
Tags: ddos self malware self-destruct

March 07, 2011
7:06
Google Removes ‘DroidDream’ Malware From Android Devices
» ‎ Darknet

Android must be getting popular! It’s always a test of a new platform or OS, when does it start getting serious malware targeting it? It seems like the time for Android is now, the news lately has been buzzing about the DroidDream malware that has been flooding the Android Market. Google pulled a number of [...]

Read the full post at darknet.org.uk

Tags: google malware android read darknet ExploitsVulnerabilities

March 04, 2011
7:32
Charlie Sheen Malware Is Cracked Out
» ‎ Packet Storm Security Headlines

Charlie Sheen Malware Is Cracked Out
Tags: charlie-sheen malware
7:25
Malware Infections And Spam Fall Off In February
» ‎ Packet Storm Security Headlines

Malware Infections And Spam Fall Off In February
Tags: infections spam malware

March 01, 2011
21:25
[Audio] Searching for Malware: A Review of Attackers' Use of Search Engines to Lure Victims
» ‎ SecDocs

Authors: Dave Maynor Paul Judge
Tags: malware
Event: DEFCON 18

Tags: audio searching malware paul-judge dave-maynor maynor attackers search-engines
21:25
[Slides] Searching for Malware: A Review of Attackers' Use of Search Engines to Lure Victims
» ‎ SecDocs

Authors: Dave Maynor Paul Judge
Tags: malware
Event: DEFCON 18

Tags: review searching malware paul-judge dave-maynor maynor attackers search-engines
21:25
[Video] Searching for Malware: A Review of Attackers' Use of Search Engines to Lure Victims
» ‎ SecDocs

Authors: Dave Maynor Paul Judge
Tags: malware
Event: DEFCON 18

Tags: video searching malware paul-judge dave-maynor maynor attackers search-engines
February 21, 2011
21:25
[Slides] Malware Migrating to Gaming Consoles: Embedded Devices, an AntiVirus-free Safe Hideout for Malware
» ‎ SecDocs

Authors: Dong-Joo Ha Ki-Chan Ahn
Tags: malware games malware analysis
Event: DEFCON 18

Tags: migrating gaming malware chan-ahn hideout ahn slides
21:25
[Video] Malware Migrating to Gaming Consoles: Embedded Devices, an AntiVirus-free Safe Hideout for Malware
» ‎ SecDocs

Authors: Dong-Joo Ha Ki-Chan Ahn
Tags: malware games malware analysis
Event: DEFCON 18

Tags: video migrating malware chan-ahn hideout ahn
21:25
[Audio] Malware Migrating to Gaming Consoles: Embedded Devices, an AntiVirus-free Safe Hideout for Malware
» ‎ SecDocs

Authors: Dong-Joo Ha Ki-Chan Ahn
Tags: malware games malware analysis
Event: DEFCON 18

Tags: audio migrating malware chan-ahn hideout ahn
February 18, 2011
21:25
[Video] 0box Analyzer: AfterDark Runtime Forensics for Automated Malware Analysis and Clustering
» ‎ SecDocs

Authors: Jeremy Chiu Wayne Huang
Tags: malware malware analysis
Event: DEFCON 18

Tags: video analysis malware wayne-huang jeremy-chiu afterdark forensics
21:25
[Audio] 0box Analyzer: AfterDark Runtime Forensics for Automated Malware Analysis and Clustering
» ‎ SecDocs

Authors: Jeremy Chiu Wayne Huang
Tags: malware malware analysis
Event: DEFCON 18

Tags: audio analysis malware wayne-huang jeremy-chiu forensics

February 09, 2011
23:59
Report: AV Users Still Get Infected With Malware
» ‎ Packet Storm Security Headlines

Report: AV Users Still Get Infected With Malware
Tags: infected report malware
February 08, 2011
16:16
Mobile Malware On The Rise, But Is It A Real Threat?
» ‎ Packet Storm Security Headlines

Mobile Malware On The Rise, But Is It A Real Threat?
Tags: mobile malware real the-rise

January 25, 2011
2:08
Digital Underground Offering Cheap Botnets For Hire
» ‎ Darknet

Perhaps even the cyber-criminals are effected by the recent recession – botnets for hire are hitting rock-bottom rates starting at just $2. We reported back in April 2010 about the Texas Man Who Pleaded Guilty To Bot Network For Hire. They are becoming more multi-talented as well rather than just offering bot networks for DDoS [...]

Read the full post at darknet.org.uk

Tags: digital bot hire read texas cyber-criminals botnets digital-underground malware

January 20, 2011
21:43
Mac Malware Made Moves In 2010
» ‎ Packet Storm Security Headlines

Mac Malware Made Moves In 2010
Tags: malware

January 19, 2011
23:45
Java Based Cross Platform Malware Trojan (Mac/Linux/Windows)
» ‎ Darknet

It’s pretty rare to read about malware on the Linux or Mac OSX platforms and even more rare to read about cross-platform malware which targets both AND Windows by using Java. A neat piece of coding indeed, it targets vulnerabilities in all 3 operating systems – the sad thing? The malware itself is vulnerable to [...]

Read the full post at darknet.org.uk

Tags: java malware linux read mac-osx mac neat-piece mac-linux linux-windows apple

January 05, 2011
8:20
Malware Growth Went Off The Scale In 2010
» ‎ Packet Storm Security Headlines

Malware Growth Went Off The Scale In 2010
Tags: scale malware growth
December 29, 2010
18:24
Android Mobile Malware Has Botnet-Like Traits
» ‎ Packet Storm Security Headlines

Android Mobile Malware Has Botnet-Like Traits
Tags: malware

December 28, 2010
21:25
[Slides] Fast Automated Unpacking and Classification of Malware
» ‎ SecDocs

Authors: Silvio Cesare
Tags: malware malware analysis obfuscation
Event: Ruxcon 2010
Abstract: Silvio developed a signature based Malware detection system using control flow graphs as features for his Masters work. Two academic papers were published during this time. He continues the work on malware classification in his PhD. The work is distinguished from previous research by being able to approach the speed and efficiency of traditional Antivirus, yet with the significantly increased effectiveness of using control flow based signatures. Control flow is seen a more accurate identifier of malware variants and relies on fingerprinting program structure instead of the byte-level content. The system is designed to scale for potential applications including desktop Antivirus, E-Mail and Internet gateways.
Tags: flow malware control silvio silvio-cesare control-flow-graphs desktop-antivirus
December 13, 2010
11:39
[Slides] Inside The Malware Industry
» ‎ SecDocs

Authors: Garry Pejski
Tags: malware cybercrime
Event: SecTor 2010

Tags: industry authors malware garry-pejski industry-authors slides
11:39
[Video] Inside The Malware Industry
» ‎ SecDocs

Authors: Garry Pejski
Tags: malware cybercrime
Event: SecTor 2010

Tags: industry video malware garry-pejski industry-authors
November 30, 2010
11:34
[Video] Malware Freakshow 2010
» ‎ SecDocs

Authors: Jibran Ilyas Nicholas J. Percoco
Tags: malware
Event: SecTor 2010

Tags: video malware freakshow nicholas-j.-percoco
11:16
[Slides] Malware Freakshow 2010
» ‎ SecDocs

Authors: Jibran Ilyas Nicholas J. Percoco
Tags: malware
Event: SecTor 2010

Tags: authors malware freakshow nicholas-j.-percoco slides

November 29, 2010
17:18
Iran: Computer Malware Sabotaged Uranium Centrifuges
» ‎ Packet Storm Security Headlines

Iran: Computer Malware Sabotaged Uranium Centrifuges
Tags: computer malware sabotaged iran uranium-centrifuges

November 28, 2010
6:45
[Video] Google's approach to malware on the web
» ‎ SecDocs

Authors: Fabrice Jaubert
Tags: malware Google
Event: SecTor 2010

Tags: malware video google fabrice-jaubert web-authors
6:28
[Slides] Google's approach to malware on the web
» ‎ SecDocs

Authors: Fabrice Jaubert
Tags: malware Google
Event: SecTor 2010

Tags: malware google approach fabrice-jaubert web-authors slides

November 17, 2010
17:45
Geographic Distribution Of Malware
» ‎ Packet Storm Security Headlines

Geographic Distribution Of Malware
Tags: distribution malware geographic geographic-distribution

November 16, 2010
23:09
TDL AKA Alureon Rootkit Now Infecting 64-Bit Windows 7 Platform
» ‎ Darknet

As we’ve come to expect, the malware guys are always at the leading edge of technological development. Now there are rootkits infecting 64-Bit versions of Windows, which have been thought of as fairly safe by most parties. The rootkit in questions is a fairly well known variant (TDL/Alureon) and has been around for several years, [...]

Read the full post at darknet.org.uk

Tags: rootkit bit tdl read aka-alureon darknet technological-development 64-bit-windows malware

November 08, 2010
10:00
Bugtraq: Malware Collections and Feed Exchange
» ‎ SecurityFocus Vulnerabilities

Malware Collections and Feed Exchange
Tags: collections malware feed

November 07, 2010
3:29
[Slides] Play with Google Maps: Mapping of Malware Source
» ‎ SecDocs

Tags: malware malware analysis
Event: AVTokyo 2009
Abstract: I thought this may be interesting if we could map the Malware source IP and the SPAM mail source IP on the global map with the geo coding. This talk will show the current status and how it looks.
Tags: malware play source google-maps mail-source spam-mail

October 26, 2010
0:00
Hackers Shopping Malware Network
» ‎ Packet Storm Security Headlines

Hackers Shopping Malware Network
Tags: hackers malware shopping

October 25, 2010
21:11
[Video] Stopping Malware
» ‎ SecDocs

Authors: Ryan Sherstobitoff
Tags: malware
Event: LayerOne 2008

Tags: video stopping malware ryan-sherstobitoff
7:00
[Slides] Stopping Malware
» ‎ SecDocs

Authors: Ryan Sherstobitoff
Tags: malware
Event: LayerOne 2008

Tags: stopping authors malware ryan-sherstobitoff slides

October 21, 2010
3:12
Malware Pushers Abuse Firefox Warning Page
» ‎ Darknet

This is a pretty neat attack from the malware pushes leveraging on the ignorance of the average user – which in all honestly is a safe bet most of the time! You could consider it a Social Engineering attack as it’s taking something that’s familiar and changing it to deliver malware. I’m sure all the [...]

Read the full post at darknet.org.uk

Tags: pushers attack malware read safe-bet darknet social-engineering malware

2:14
NSDECODER – Automated Website Malware Detection Tool
» ‎ Darknet

NSDECODER is a automated website malware detection tool. It can be used to decode and analyze an URL to see if it host to malware. Also, NSDECODER will analyze which vulnerability has been exploited and the original source address of malware. Functions Automated analysis and detection of website malware. Detection for plenty of vulnerabilities....

Read the full post at darknet.org.uk

Tags: detection malware nsdecoder read source-address darknet original-source Countermeasures

October 18, 2010
14:01
Bugtraq: Antivirus detection after malware execution
» ‎ SecurityFocus Vulnerabilities

Antivirus detection after malware execution
Tags: malware antivirus detection execution

9:52
[Slides] Analyzing Massive Web Attacks
» ‎ SecDocs

Authors: Laurent Oudot
Tags: malware web malware analysis
Event: Hack In The Box 2010 Malaysia

Tags: analyzing malware web laurent-oudot malaysia hack-in-the-box massive-web web-attacks

0:00
FAQ- Help! My PC Is Infected With Malware
» ‎ Packet Storm Security Headlines

FAQ- Help! My PC Is Infected With Malware
Tags: infected malware faq
0:00
Microsoft Reports Unprecedented Wave Of Java Malware Exploits
» ‎ Packet Storm Security Headlines

Microsoft Reports Unprecedented Wave Of Java Malware Exploits
Tags: unprecedented microsoft reports unprecedented-wave malware
0:00
FAQ - Help! My PC Is Infected With Malware
» ‎ Packet Storm Security Headlines

FAQ - Help! My PC Is Infected With Malware
Tags: infected malware faq

October 08, 2010
21:02
[Video] Aurora attacks
» ‎ SecDocs

Authors: Jesse Burns
Tags: malware Aurora
Event: Confidence 2010 Krakow

Tags: video authors tags jesse-burns aurora krakow malware burns
21:02
[Audio] Aurora attacks
» ‎ SecDocs

Authors: Jesse Burns
Tags: malware Aurora
Event: Confidence 2010 Krakow

Tags: audio authors tags jesse-burns aurora krakow malware burns
October 06, 2010
0:47
[Audio] The Four Horsemen – Malware for mobile
» ‎ SecDocs

Authors: Axelle Apvrille
Tags: malware phone
Event: Confidence 2010 Krakow

Tags: horsemen audio malware krakow four-horsemen confidence
0:47
[Video] The Four Horsemen – Malware for mobile
» ‎ SecDocs

Authors: Axelle Apvrille
Tags: malware phone
Event: Confidence 2010 Krakow

Tags: horsemen video malware krakow four-horsemen confidence
October 02, 2010
3:08
[Slides] Analysis of a Next Generation Botnet
» ‎ SecDocs

Authors: Dino Covotsos
Tags: malware malware analysis
Event: Hack In The Box 2010 Dubai

Tags: malware analysis next dino-covotsos dubai hack-in-the-box next-generation
October 01, 2010
4:04
[Paper] W32.Stuxnet Dossier
» ‎ SecDocs

Authors: Eric Chien Liam O Murchu Nicolas Falliere
Tags: malware malware analysis Stuxnet

Tags: malware stuxnet paper liam-o-murchu eric-chien nicolas-falliere

September 28, 2010
0:00
LinkedIn Malware Targets Business Users
» ‎ Packet Storm Security Headlines

LinkedIn Malware Targets Business Users
Tags: malware target busine business-users targets
0:00
Researchers Up Evilness Ante With GPU-Assisted Malware
» ‎ Packet Storm Security Headlines

Researchers Up Evilness Ante With GPU-Assisted Malware
Tags: ante researchers evilness malware

September 27, 2010
4:08
[Paper] Stuxnet Under the Microscope
» ‎ SecDocs

Tags: malware malware analysis Stuxnet

Tags: malware stuxnet paper microscope

0:00
Malware Attacks Fore MS To Ship Emergency ASP.net Patch
» ‎ Packet Storm Security Headlines

Malware Attacks Fore MS To Ship Emergency ASP.net Patch
Tags: fore malware attacks
0:00
Malware Attacks Force MS To Ship Emergency ASP.net Patch
» ‎ Packet Storm Security Headlines

Malware Attacks Force MS To Ship Emergency ASP.net Patch
Tags: malware attacks force

September 21, 2010
1:59
[Slides] So You Want To Analyze Malware?
» ‎ SecDocs

Authors: Wes Brown
Tags: malware malware analysis
Event: Hack In The Box 2009 Dubai

Tags: analyze malware want wes-brown-tags dubai wes-brown hack-in-the-box

September 20, 2010
15:00
Bugtraq: Vulnerable 3rd-party DLLs used in TrendMicro's malware scanner HouseCall
» ‎ SecurityFocus Vulnerabilities

Vulnerable 3rd-party DLLs used in TrendMicro's malware scanner HouseCall
Tags: trendmicro dlls vulnerable housecall malware scanner

0:00
Windows Malware Dwarfs Other Viral Threats
» ‎ Packet Storm Security Headlines

Windows Malware Dwarfs Other Viral Threats
Tags: malware dwarfs windows viral-threats

September 09, 2010
12:53
[Slides] How Low Will Malware Go?
» ‎ SecDocs

Authors: Nishad Herath
Tags: malware malware analysis
Event: Hack In The Box 2009 Malaysia

Tags: will malware low malaysia hack-in-the-box slides
September 06, 2010
4:49
[Slides] Malware Detection Tool for Websites
» ‎ SecDocs

Authors: Anant Kochar
Tags: malware malware analysis
Event: Nullcon 2010

Tags: detection malware tool slides

September 05, 2010
21:01
malware_check_tool-1.2.zip
» ‎ Packet Storm Security Tools

Malware Check Tool is a python script that detects malicious files via checking md5 hashes from an offline set or via the virustotal site. It has http proxy support and an update feature.
Tags: malware tool check python-script check-tool malicious-files

21:00
malware_check_tool-1.2.zip
» ‎ Packet Storm Security Recent Files

Malware Check Tool is a python script that detects malicious files via checking md5 hashes from an offline set or via the virustotal site. It has http proxy support and an update feature.
Tags: malware tool check python-script check-tool malicious-files
August 31, 2010
12:01
ninga.zip
» ‎ Packet Storm Security Recent Files

This is a proof of concept, self replicating, social network based malware for NING.
Tags: proof ninga zip proof-of-concept malware

12:00
ninga.zip
» ‎ Packet Storm Security Exploits

This is a proof of concept, self replicating, social network based malware for NING.
Tags: proof ninga zip proof-of-concept malware

August 14, 2010
1:04
[Audio] Snort My Memory
» ‎ SecDocs

Authors: Peter Silberman
Tags: malware malware analysis
Event: Black Hat DC 2009

Tags: malware audio snort peter-silberman black-hat silberman
1:04
[Video] Snort My Memory
» ‎ SecDocs

Authors: Peter Silberman
Tags: malware malware analysis
Event: Black Hat DC 2009

Tags: malware video snort peter-silberman black-hat silberman memory
August 13, 2010
2:08
[Audio] Dissecting Web Attacks
» ‎ SecDocs

Authors: Colin Ames Val Smith
Tags: malware web malware analysis
Event: Black Hat DC 2009

Tags: malware audio web colin-ames val-smith web-attacks
2:08
[Video] Dissecting Web Attacks
» ‎ SecDocs

Authors: Colin Ames Val Smith
Tags: malware web malware analysis
Event: Black Hat DC 2009

Tags: malware video web colin-ames val-smith web-attacks

August 06, 2010
15:01
malheur-0.4.8.tar.gz
» ‎ Packet Storm Security Tools

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malware behavior malheur norman-sandbox program-behavior tar-gz malicious-software

15:01
malheur-0.4.8.tar.gz
» ‎ Packet Storm Security Recent Files

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malware behavior malheur norman-sandbox program-behavior tar-gz malicious-software

August 04, 2010
4:16
[Audio] Xploiting Google Gadgets: Gmalware and Beyond
» ‎ SecDocs

Authors: Tom Stracener
Tags: malware exploiting malware analysis Google
Event: Black Hat USA 2008

Tags: malware audio google tom-stracener usa black-hat gadgets
4:16
[Video] Xploiting Google Gadgets: Gmalware and Beyond
» ‎ SecDocs

Authors: Tom Stracener
Tags: malware exploiting malware analysis Google
Event: Black Hat USA 2008

Tags: malware video google tom-stracener usa black-hat gadgets
4:13
[Audio] Protocols and Encryption of The Storm Botnet
» ‎ SecDocs

Authors: Joe Stewart
Tags: malware botnet malware analysis
Event: Black Hat USA 2008

Tags: malware botnet audio joe-stewart-tags usa joe-stewart black-hat storm-botnet
4:13
[Slides] Protocols and Encryption of The Storm Botnet
» ‎ SecDocs

Authors: Joe Stewart
Tags: malware botnet malware analysis
Event: Black Hat USA 2008

Tags: malware botnet protocols joe-stewart-tags usa joe-stewart black-hat storm-botnet

Skip to page: 1 2

jetlib.sec » Tags » malware

Feeds

331 items tagged "malware"

Tags: malware apple security malware-removal-tool security-advisory flashback

Tags: malware advisory flashback apple-security malware-removal-tool security-advisory

Tags: malware advisory flashback apple-security malware-removal-tool security-advisory

Tags: malware android levels

Tags: strain malware ransom new new-malware locks

Tags: makers earns malware flashback

Tags: part malware engineering reverse-engineering whitepaper

Tags: malware card security compact-flash-card potential-security-vulnerability hp-procurve

Tags: malware card security compact-flash-card potential-security-vulnerability hp-procurve

Tags: malware card security compact-flash-card potential-security-vulnerability hp-procurve

Tags: research sophos malware mac-computers

Tags: malware video stuxnet bruce-dang peter-ferrie chaos-communication-congress technical-vulnerability mainstream-press

Tags: malware audio stuxnet bruce-dang peter-ferrie chaos-communication-congress technical-vulnerability mainstream-press

Tags: malware flashback removal removal-tool bugtraq

Tags: year trojan android read china google darknet japanese-market malware

Tags: infected malware flash hp-switches flash-card

Tags: malware removal windows windows-operation malicious-software removal-guide

Tags: malware removal windows windows-operation malicious-software removal-guide

Tags: fake angry bird hide-android- malware

Tags: million infected malware mac-computers half-a-million

Tags: analyser hook malware hook-tool tool-1 analysing

Tags: update malware android

Tags: malware trojan android

Tags: malware network firmware jonathan-voris chaos-communication-congress hp-printers hp-firmware

Tags: malware network firmware jonathan-voris chaos-communication-congress hp-printers hp-firmware

Tags: malware extension profiles

Tags: flashback removing detecting malware os-x

Tags: banking mobile security banking-security mobile-banking malware

Tags: spread symantec warns malware

Tags: anti malware android scanners job

Tags: hacker spy anonymous read zeus zeus-botmaster game-spy ddos-tool botmaster malware

Tags: show malware levels signs

Tags: grows rise malware android

Tags: malware android rootsmart

Tags: devs malware embrace open-source

Tags: mobile researchers security security-researchers mobile-security malware

Tags: malware network code aurora abu-dhabi open-source-tools using-open-source-tools night-dragon

Tags: wordpress targeted malware

Tags: authors malware scenes ian-amit-tags black-hat amit slides

Tags: malware scenes paper ian-amit-tags black-hat amit

Tags: super malware development read darknet executable-files strains malware

Tags: carberp malware target targets

Tags: malware symbian paper black-hat

Tags: part report malware networked-equipment static-analysis tier-ii

Tags: part report malware networked-equipment static-analysis tier-ii

Tags: hackers spread malware gaming-sites

Tags: malware symbian paper black-hat

Tags: authors malware symbian black-hat slides

Tags: cinema malware picture gregory-conti black-hat conti slides

Tags: malware demystified rfid melanie-rieback usa black-hat slides

Tags: malware javascript hacking jeremiah-grossman usa intranet-websites black-hat

Tags: facebook worm bank read e-mail-address account-passwords bank-information malware

Tags: track detect malware georg-wicherski thorsten-holz asia black-hat thorsten

Tags: international compromised amnesty amnesty-international-uk malware exploits

Tags: malware android hits

Tags: anatomy malware paper hide black-hat stealth

Tags: anatomy malware stealth hide black-hat

Tags: download malware com fyodor third-party-software fiasco

Tags: download malware com fyodor third-party-software fiasco

Tags: download malware com fyodor third-party-software fiasco

Tags: malware google spreading whitepaper

Tags: malware google spreading whitepaper

Tags: makes popularity android open-target malware

Tags: launch malware writers electronic-payment

Tags: facebook new takes zeus-malware zeus malware

Tags: mobile malware android the-way

Tags: poisons mystery malware ambulance-system

Tags: mobile targeted malware

Tags: analyser hook malware hook-tool tool-1 analysing

Tags: analyser hook malware hook-tool tool-1 analysing

Tags: analyser hook malware hook-tool tool-1 analysing

Tags: malware android freebie anti-malware scanners

Tags: neutralizing malware nimda tim-mullen asia black-hat slides