< Back to JetLib.com

malware

« Expand/Collapse

388 items tagged "malware"

Skip to page: 1 2

December 27, 2012
19:09
Malheur Malware Analyzer 0.5.3
» ‎ Packet Storm Security Recent Files

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

19:09
Malheur Malware Analyzer 0.5.3
» ‎ Packet Storm Security Tools

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software
19:09
Malheur Malware Analyzer 0.5.3
» ‎ Packet Storm Security Tools

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

19:09
Malheur Malware Analyzer 0.5.3
» ‎ Packet Storm Security Misc. Files

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

December 24, 2012
16:06
Hook Analyser Malware Tool 2.2
» ‎ Packet Storm Security Recent Files

Hook Analyser is a hook tool which can be potentially helpful in reversing applications and analysing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.
Tags: analyser hook malware hook-tool tool-2 analysing

16:06
Hook Analyser Malware Tool 2.2
» ‎ Packet Storm Security Tools

Hook Analyser is a hook tool which can be potentially helpful in reversing applications and analysing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.
Tags: analyser hook malware hook-tool tool-2 analysing
16:06
Hook Analyser Malware Tool 2.2
» ‎ Packet Storm Security Tools

Hook Analyser is a hook tool which can be potentially helpful in reversing applications and analysing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.
Tags: analyser hook malware hook-tool tool-2 analysing

16:06
Hook Analyser Malware Tool 2.2
» ‎ Packet Storm Security Misc. Files

Hook Analyser is a hook tool which can be potentially helpful in reversing applications and analysing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.
Tags: analyser hook malware hook-tool tool-2 analysing

December 13, 2012
18:47
Dexter Malware Targets Point Of Sale Systems Worldwide
» ‎ Packet Storm Security Headlines

Dexter Malware Targets Point Of Sale Systems Worldwide
Tags: point targets sale dexter-malware point-of-sale-systems point-of-sale malware
December 11, 2012
8:29
Warning Of Malware Attack From WordPress Exploit
» ‎ Packet Storm Security Headlines

Warning Of Malware Attack From WordPress Exploit
Tags: warning attack malware exploit
December 10, 2012
16:19
Android's On-Board Malware Scanner Utterly Fails
» ‎ Packet Storm Security Headlines

Android's On-Board Malware Scanner Utterly Fails
Tags: android malware scanner

December 09, 2012
19:07
Reversing And Malware Analysis Training
» ‎ Packet Storm Security Recent Files

This archive holds twelves PDFs that hold presentations for Reversing and Malware Analysis Training. The Topics covered are Lab Setup Guide, Introduction to Windows Internals, Windows PE File Format Basics, Assembly Programming Basics, Reverse Engineering Tools Basics, Practical Reversing (I), Unpacking UPX, Malware Memory Forensics, Advanced Malware Analysis, Exploit Development Basics, Exploit Development Advanced, and Rootkit Analysis.
Tags: analysis malware basics pe-file-format assembly-programming windows-pe

19:07
Reversing And Malware Analysis Training
» ‎ Packet Storm Security Misc. Files

This archive holds twelves PDFs that hold presentations for Reversing and Malware Analysis Training. The Topics covered are Lab Setup Guide, Introduction to Windows Internals, Windows PE File Format Basics, Assembly Programming Basics, Reverse Engineering Tools Basics, Practical Reversing (I), Unpacking UPX, Malware Memory Forensics, Advanced Malware Analysis, Exploit Development Basics, Exploit Development Advanced, and Rootkit Analysis.
Tags: analysis malware basics pe-file-format assembly-programming windows-pe

December 07, 2012
7:24
Major £30m Cyberheist Pulled Off Using Mobile Malware
» ‎ Packet Storm Security Headlines

Major £30m Cyberheist Pulled Off Using Mobile Malware
Tags: mobile cyberheist pulled 30m malware
December 04, 2012
8:43
Polymorphic Malware On The Rise
» ‎ Packet Storm Security Headlines

Polymorphic Malware On The Rise
Tags: polymorphic malware the-rise
December 02, 2012
19:17
Malware Slurps Rocket Data From Japanese Space Agency
» ‎ Packet Storm Security Headlines

Malware Slurps Rocket Data From Japanese Space Agency
Tags: slurps malware rocket japanese-space-agency rocket-data
November 20, 2012
8:13
Malware Made Which Can Share A Smartcard Over The Internet
» ‎ Packet Storm Security Headlines

Malware Made Which Can Share A Smartcard Over The Internet
Tags: share smartcard malware

November 15, 2012
2:34
[Slides] Tracking Botnets
» ‎ SecDocs

Authors: Thorsten Holz
Tags: malware botnet malware analysis
Event: CanSecWest 2005

Tags: malware tracking botnets thorsten-holz slides

November 14, 2012
8:03
E-Mail Malware Posing As Groupon On The Rise
» ‎ Packet Storm Security Headlines

E-Mail Malware Posing As Groupon On The Rise
Tags: posing e-mail malware the-rise
November 02, 2012
18:33
Is New Malware Jacksbot Just Starting To Rear Its Head?
» ‎ Packet Storm Security Headlines

Is New Malware Jacksbot Just Starting To Rear Its Head?
Tags: jacksbot new malware

12:13
Kindsight Malware Report Q3 2012
» ‎ Packet Storm Security Recent Files

The Kindsight Security Labs Q3 2012 Malware Report examines general trends for malware infections in home networks or infections in mobile devices and computers connected through mobile adapters. The data in this report is aggregated across the networks where Kindsight solutions are deployed.
Tags: report kindsight malware mobile-adapters security-labs home-networks

12:13
Kindsight Malware Report Q3 2012
» ‎ Packet Storm Security Misc. Files

The Kindsight Security Labs Q3 2012 Malware Report examines general trends for malware infections in home networks or infections in mobile devices and computers connected through mobile adapters. The data in this report is aggregated across the networks where Kindsight solutions are deployed.
Tags: report kindsight malware mobile-adapters security-labs home-networks

October 30, 2012
19:36
Q3 Malware Costs Advertisers $900,000 Every Day
» ‎ Packet Storm Security Headlines

Q3 Malware Costs Advertisers $900,000 Every Day
Tags: day malware advertisers
October 29, 2012
19:16
Malware Hijacks Your Email, Sends Death Threats
» ‎ Packet Storm Security Headlines

Malware Hijacks Your Email, Sends Death Threats
Tags: hijacks malware your death-threats email

October 23, 2012
16:22
Hook Analyser Malware Tool 2.1
» ‎ Packet Storm Security Recent Files

Hook Analyser is a hook tool which can be potentially helpful in reversing applications and analysing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.
Tags: analyser hook malware hook-tool tool-2 analysing

16:22
Hook Analyser Malware Tool 2.1
» ‎ Packet Storm Security Tools

Hook Analyser is a hook tool which can be potentially helpful in reversing applications and analysing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.
Tags: analyser hook malware hook-tool tool-2 analysing

16:22
Hook Analyser Malware Tool 2.1
» ‎ Packet Storm Security Misc. Files

Hook Analyser is a hook tool which can be potentially helpful in reversing applications and analysing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.
Tags: analyser hook malware hook-tool tool-2 analysing

October 22, 2012
15:46
[Slides] Inside the Duqu Command & Control Servers
» ‎ SecDocs

Authors: Roel Schouwenberg
Tags: malware malware analysis
Event: CanSecWest 2012

Tags: malware duqu command control-servers slides

October 15, 2012
18:46
Google Working On Malware Scanner For App Store
» ‎ Packet Storm Security Headlines

Google Working On Malware Scanner For App Store
Tags: google malware working scanner
October 03, 2012
7:36
Malware Distributor Handed $163m Fine For Scareware Operation
» ‎ Packet Storm Security Headlines

Malware Distributor Handed $163m Fine For Scareware Operation
Tags: distributor malware handed

September 30, 2012
9:26
Web Malware Collection
» ‎ Packet Storm Security Recent Files

This archive contains web malware recovered from honeypots and other places. It includes various backdoors, bots, exploits, and more. Please note that many of the files ARE backdoored so you should exercise extreme caution and analyze them before any execution.
Tags: malware web collection extreme-caution exploits execution

9:26
Web Malware Collection
» ‎ Packet Storm Security Tools

This archive contains web malware recovered from honeypots and other places. It includes various backdoors, bots, exploits, and more. Please note that many of the files ARE backdoored so you should exercise extreme caution and analyze them before any execution.
Tags: malware web collection extreme-caution exploits execution

9:26
Web Malware Collection
» ‎ Packet Storm Security Misc. Files

This archive contains web malware recovered from honeypots and other places. It includes various backdoors, bots, exploits, and more. Please note that many of the files ARE backdoored so you should exercise extreme caution and analyze them before any execution.
Tags: malware web collection extreme-caution exploits execution

5:11
Spyeye Checker
» ‎ Packet Storm Security Recent Files

A simple test to see is a host infected with earlier versions of "SpyEye" malware, which dropped a file at the same location every time. Good "proof of concept" showing that malware can be easily detected based on predictable behavior. later versions of SpyEye randomly chose their "drop file" location.
Tags: malware spyeye file predictable-behavior proof-of-concept simple-test

5:11
Spyeye Checker
» ‎ Packet Storm Security Misc. Files

A simple test to see is a host infected with earlier versions of "SpyEye" malware, which dropped a file at the same location every time. Good "proof of concept" showing that malware can be easily detected based on predictable behavior. later versions of SpyEye randomly chose their "drop file" location.
Tags: malware spyeye file predictable-behavior proof-of-concept simple-test

September 19, 2012
1:41
More Malware Targeting Iran Could Yet Be Discovered
» ‎ Packet Storm Security Headlines

More Malware Targeting Iran Could Yet Be Discovered
Tags: targeting malware discovered iran targeting-iran

September 17, 2012
9:12
[Slides] Code Injection for Nintendo Wii
» ‎ SecDocs

Authors: Dong-Joo Ha Ki-Chan Ahn
Tags: Nintendo
Event: AVTokyo 2010
Abstract: A large portion of people who possess a Gaming Console or a Smartphone are downloading paid software illegally from the web or p2p. Most of those people do not even give a second thought before installing the downloaded software, and merely just check that the application works. The sense of security here comes from the application's popularity and the fact that the application is working as advertised with no noticeable problems. The reason why people have this kind of false sense of security for Console Gaming systems or Mobile Devices is because they are not fully aware that malware can potentially bring the same devastating effects as that of a PC malware, and no one has published a reliable way to inject a malware to a legit software. However, the boundry of these devices and the PC is getting very thin due to the evolution of hardware, which makes these devices capable of bringing the same negative effects of PC malware. In this presentation, we will show how to inject code into binary for Nintendo Wii, and show a demo live action.
Tags: malware nintendo Software chan-ahn nintendo-wii false-sense-of-security legit-software

September 13, 2012
21:20
Malware Inserted On PC Production Lines, Says Study
» ‎ Packet Storm Security Headlines

Malware Inserted On PC Production Lines, Says Study
Tags: inserted malware study pc-production
September 04, 2012
20:30
Mobile Malware Getting Harder To Spot, Say Researchers
» ‎ Packet Storm Security Headlines

Mobile Malware Getting Harder To Spot, Say Researchers
Tags: getting malware harder

August 30, 2012
21:49
[Slides] Trojans, A Reality Check
» ‎ SecDocs

Authors: Toralv Dirro
Tags: malware trojan
Event: Chaos Communication Camp 2007
Abstract: This talk focuses on the various trojans the we actually see being used against companies and individuals in the world. It will show the real threats, how they work, what the real impact is. The talk will include screenshots from dropzones and practical demos, possibly as video clips. Today there is a lot of hype around some new proof-of-concept technology or around politically motivated trojans, etc. This talk will deliver a reality check, give an idea what kind of malware the McAfee Research organisation is actually seeing to be used in the real world and show how the diffent trojans work, what the impact is. The material used are internal statistics of the various threats sent to oder discovered by us, some more detailed analysis to make functionality more transparent and some demo's screenshots, etc. This talk will not advertise any products from us or anyone else. Instead of that short examples of various technologies will be used to discuss of that may help or why it fails.
Tags: malware talk reality trojans chaos-communication-camp internal-statistics idea-what-kind

August 27, 2012
8:00
Chancers Try To Flog Lame Mac Malware For $60 A Pop
» ‎ Packet Storm Security Headlines

Chancers Try To Flog Lame Mac Malware For $60 A Pop
Tags: lame chancers flog mac-malware malware

August 26, 2012
21:46
[Video] Automated Botnet Detection and Mitigation
» ‎ SecDocs

Authors: Georg Wicherski
Tags: malware botnet
Event: Chaos Communication Congress 23th (23C3) 2006
Abstract: Botnets are one of the most buzzy buzzwords out there today in the computer security world. The presented approach allows us to take reliably care of these, such that managers hopefully will not react on ``botnet'' in 2008 any more. This technology allows for automated catching of malware with the now somewhat known nepenthes daemon, automated analysis with CWSandbox and other sandboxes, automated botnet snooping with the botsnoopd daemon and finally (semi-)automated mitigation using various weapons. Hopefully, our autonomous approach will never turn against the human race and begin the final war... This presentation explains the various components of our approach to botnet detection and mitigation from the beginning to the end in detail. First, we will have a look at nepenthes; see how it has evolved, works and also point out some weaknesses. nepenthes is a versatile tool for malware collection and available under the GPL license at . Although, people have presented on it on various conferences, this tool is still not known by a lot of malware researchers. Additionally, most presentation focus on the results you can achive with nepenthes, whereas this presentation will show you how it really works. The next step in botnet mitigation then is to sandbox the malware to gather information about the botnet itself, e.g. server hostname, channel names or for other types of botnet, the other relevant information for connecting to it. Our current approach is based on the CWSandbox developed by Carsten Willems at the RWTH Aachen, not available to the public. We however also work with the Chinese Honeynet Project's work (MWSniffer), experiment with Norman's work (Norman Sandbox) and plan to include Emsi's work in the future (CodeKnigge). After sandboxing the malware, we automatically connect into the botnet and snoop all relevant commands, traffic and generate statistics (some fancy charts that is). This allows us to generate statistics about DDoS attacks carried out throug monitored botnets, gather intelligences about identity theft and provide LEOs with relevant information (the most reliable way to mitigate botnets). We closely cooperate with the ShadowServer crew for botnet monitoring. Once a botnet has been identified as a severe threat to the Internet, it can be shut down (semi-) automatically. Since we wanted to stay away from a solely automated atomar weapon, which might be fooled to be autonomously fired at Washington, D.C., we still have to confirm the mitigation process. Mitigation involves notification of involved ASNs, botnet sinkholing and DNS poisoning. Additionally, cooperation with some German ISPs will hopefully enable us to cut off infected clients from the Internet in the future.
Tags: malware botnet mitigation norman carsten-willems washington d.c. norman-sandbox georg-wicherski chaos-communication-congress botnet-detection
21:46
[Audio] Automated Botnet Detection and Mitigation
» ‎ SecDocs

Authors: Georg Wicherski
Tags: malware botnet
Event: Chaos Communication Congress 23th (23C3) 2006
Abstract: Botnets are one of the most buzzy buzzwords out there today in the computer security world. The presented approach allows us to take reliably care of these, such that managers hopefully will not react on ``botnet'' in 2008 any more. This technology allows for automated catching of malware with the now somewhat known nepenthes daemon, automated analysis with CWSandbox and other sandboxes, automated botnet snooping with the botsnoopd daemon and finally (semi-)automated mitigation using various weapons. Hopefully, our autonomous approach will never turn against the human race and begin the final war... This presentation explains the various components of our approach to botnet detection and mitigation from the beginning to the end in detail. First, we will have a look at nepenthes; see how it has evolved, works and also point out some weaknesses. nepenthes is a versatile tool for malware collection and available under the GPL license at . Although, people have presented on it on various conferences, this tool is still not known by a lot of malware researchers. Additionally, most presentation focus on the results you can achive with nepenthes, whereas this presentation will show you how it really works. The next step in botnet mitigation then is to sandbox the malware to gather information about the botnet itself, e.g. server hostname, channel names or for other types of botnet, the other relevant information for connecting to it. Our current approach is based on the CWSandbox developed by Carsten Willems at the RWTH Aachen, not available to the public. We however also work with the Chinese Honeynet Project's work (MWSniffer), experiment with Norman's work (Norman Sandbox) and plan to include Emsi's work in the future (CodeKnigge). After sandboxing the malware, we automatically connect into the botnet and snoop all relevant commands, traffic and generate statistics (some fancy charts that is). This allows us to generate statistics about DDoS attacks carried out throug monitored botnets, gather intelligences about identity theft and provide LEOs with relevant information (the most reliable way to mitigate botnets). We closely cooperate with the ShadowServer crew for botnet monitoring. Once a botnet has been identified as a severe threat to the Internet, it can be shut down (semi-) automatically. Since we wanted to stay away from a solely automated atomar weapon, which might be fooled to be autonomously fired at Washington, D.C., we still have to confirm the mitigation process. Mitigation involves notification of involved ASNs, botnet sinkholing and DNS poisoning. Additionally, cooperation with some German ISPs will hopefully enable us to cut off infected clients from the Internet in the future.
Tags: malware botnet mitigation norman carsten-willems washington d.c. norman-sandbox georg-wicherski chaos-communication-congress botnet-detection

August 23, 2012
7:55
BlackBerry ID Malware Targeting RIM Corporate Customers
» ‎ Packet Storm Security Headlines

BlackBerry ID Malware Targeting RIM Corporate Customers
Tags: targeting malware blackberry corporate-customers
August 22, 2012
16:58
Crisis Malware Infects VMware Virtual Machines
» ‎ Packet Storm Security Headlines

Crisis Malware Infects VMware Virtual Machines
Tags: infects crisis malware virtual-machines
August 16, 2012
20:41
Android Malware Rockets As SMS Trojan Use Grows
» ‎ Packet Storm Security Headlines

Android Malware Rockets As SMS Trojan Use Grows
Tags: sms rockets malware trojan
August 13, 2012
8:06
Zeus-Like Dorifel Malware Spotted In Europe
» ‎ Packet Storm Security Headlines

Zeus-Like Dorifel Malware Spotted In Europe
Tags: zeus malware europe

August 09, 2012
15:21
[Video] Stealth malware - can good guys win?
» ‎ SecDocs

Authors: Joanna Rutkowska
Tags: malware
Event: Chaos Communication Congress 23th (23C3) 2006
Abstract: The presentation will try to present current challenges in detecting advanced forms of stealth malware and explain why current detection approaches, as used in commercial A/V or IDS products, are insufficient. The author will try to convince the audience that *detection* is no less important then *prevention* and that we need a *systematic* approach to implement a good compromise detector, instead of a bunch of "hacks" as we have today.
Tags: malware detection stealth joanna-rutkowska chaos-communication-congress 23th
15:13
[Slides] Stealth malware - can good guys win?
» ‎ SecDocs

Authors: Joanna Rutkowska
Tags: malware
Event: Chaos Communication Congress 23th (23C3) 2006
Abstract: The presentation will try to present current challenges in detecting advanced forms of stealth malware and explain why current detection approaches, as used in commercial A/V or IDS products, are insufficient. The author will try to convince the audience that *detection* is no less important then *prevention* and that we need a *systematic* approach to implement a good compromise detector, instead of a bunch of "hacks" as we have today.
Tags: malware detection stealth joanna-rutkowska chaos-communication-congress 23th
15:07
[Audio] Stealth malware - can good guys win?
» ‎ SecDocs

Authors: Joanna Rutkowska
Tags: malware
Event: Chaos Communication Congress 23th (23C3) 2006
Abstract: The presentation will try to present current challenges in detecting advanced forms of stealth malware and explain why current detection approaches, as used in commercial A/V or IDS products, are insufficient. The author will try to convince the audience that *detection* is no less important then *prevention* and that we need a *systematic* approach to implement a good compromise detector, instead of a bunch of "hacks" as we have today.
Tags: malware detection stealth joanna-rutkowska chaos-communication-congress 23th

August 08, 2012
6:47
Mobile Zeus Malware Found Targeting Blackberry Devices
» ‎ Packet Storm Security Headlines

Mobile Zeus Malware Found Targeting Blackberry Devices
Tags: blackberry targeting found zeus-malware zeus malware
July 19, 2012
7:35
Fake Facebook Photo Tag Ruse Smears Malware On PCs
» ‎ Packet Storm Security Headlines

Fake Facebook Photo Tag Ruse Smears Malware On PCs
Tags: photo facebook fake photo-tag ruse malware
July 11, 2012
19:18
Malware Went Undiscovered For Weeks On Google Play
» ‎ Packet Storm Security Headlines

Malware Went Undiscovered For Weeks On Google Play
Tags: malware weeks undiscovered google

July 09, 2012
10:14
Android Malware App Covertly Makes Purchases On China Mobile Market
» ‎ Darknet

There seems to be a trend towards malware on the Android platform that extorts money from the user somehow, either through premium SMS or services – or the latest trojan – which covertly purchases apps from the mobile market. We first wrote about Android Antivirus software from Symantec back in 2010 and it seems like [...]

Read the full post at darknet.org.uk

Tags: market malware android read china premium-sms china-mobile mobile-market malware

June 27, 2012
20:49
Hook Analyser Malware Tool 2.0
» ‎ Packet Storm Security Recent Files

Hook Analyser is a hook tool which can be potentially helpful in reversing applications and analysing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.
Tags: analyser hook malware hook-tool tool-2 analysing

20:49
Hook Analyser Malware Tool 2.0
» ‎ Packet Storm Security Misc. Files

Hook Analyser is a hook tool which can be potentially helpful in reversing applications and analysing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.
Tags: analyser hook malware hook-tool tool-2 analysing

June 12, 2012
21:54
[Audio] Banking Malware 101
» ‎ SecDocs

Authors: Thorsten Holz
Tags: malware bank
Event: Chaos Communication Congress 25th (25C3) 2008
Abstract: In the recent years, we observed a growing sophistication how credentials are stolen from compromised machines: the attackers use sophisticated keyloggers to control the victim's machine and use different techniques to steal the actual credentials. In this talk, we present an overview of this threat and empirical measurement results.
Tags: banking audio malware thorsten-holz chaos-communication-congress empirical-measurement measurement-results

May 15, 2012
15:14
Apple Security Advisory 2012-05-14-1
» ‎ Packet Storm Security Advisories

Apple Security Advisory 2012-05-14-1 - This update runs a malware removal tool that will remove the most common variants of the Flashback malware. If the Flashback malware is found, it presents a dialog notifying the user that malware was removed. There is no indication to the user if malware is not found.
Tags: malware apple security malware-removal-tool security-advisory flashback

15:14
Apple Security Advisory 2012-05-14-1
» ‎ Packet Storm Security Recent Files

Apple Security Advisory 2012-05-14-1 - This update runs a malware removal tool that will remove the most common variants of the Flashback malware. If the Flashback malware is found, it presents a dialog notifying the user that malware was removed. There is no indication to the user if malware is not found.
Tags: malware advisory flashback apple-security malware-removal-tool security-advisory

15:14
Apple Security Advisory 2012-05-14-1
» ‎ Packet Storm Security Misc. Files

Apple Security Advisory 2012-05-14-1 - This update runs a malware removal tool that will remove the most common variants of the Flashback malware. If the Flashback malware is found, it presents a dialog notifying the user that malware was removed. There is no indication to the user if malware is not found.
Tags: malware advisory flashback apple-security malware-removal-tool security-advisory

10:29
Android Malware Levels Quadrupled Over Past Two Years
» ‎ Packet Storm Security Headlines

Android Malware Levels Quadrupled Over Past Two Years
Tags: malware android levels
May 07, 2012
12:48
New Malware Strain Locks Up Computers Unless Ransom Is Paid
» ‎ Packet Storm Security Headlines

New Malware Strain Locks Up Computers Unless Ransom Is Paid
Tags: strain malware ransom new new-malware locks
May 02, 2012
8:47
Flashback Malware Earns Makers $10,000 A Day
» ‎ Packet Storm Security Headlines

Flashback Malware Earns Makers $10,000 A Day
Tags: makers earns malware flashback

May 01, 2012
19:02
Reverse Engineering Malware Part 1
» ‎ Packet Storm Security Misc. Files

Whitepaper called Reverse Engineering Malware Part 1.
Tags: part malware engineering reverse-engineering whitepaper

April 27, 2012
13:33
HP Security Bulletin HPSBPV02754 SSRT100803 2
» ‎ Packet Storm Security Advisories

HP Security Bulletin HPSBPV02754 SSRT100803 2 - A potential security vulnerability has been identified with certain HP ProCurve 5400 zl switches using a compact flash card which may contain malware content that is a PC trojan executable. The ProCurve switch operating system is not infected with the malware and the content on the compact flash card has no impact on the operation of the switch. Reuse of the compact flash card in a personal computer and manual execution of the malware content could result in a compromise of that system's integrity. Revision 2 of this advisory.
Tags: malware card security compact-flash-card potential-security-vulnerability hp-procurve

13:33
HP Security Bulletin HPSBPV02754 SSRT100803 2
» ‎ Packet Storm Security Recent Files

HP Security Bulletin HPSBPV02754 SSRT100803 2 - A potential security vulnerability has been identified with certain HP ProCurve 5400 zl switches using a compact flash card which may contain malware content that is a PC trojan executable. The ProCurve switch operating system is not infected with the malware and the content on the compact flash card has no impact on the operation of the switch. Reuse of the compact flash card in a personal computer and manual execution of the malware content could result in a compromise of that system's integrity. Revision 2 of this advisory.
Tags: malware card security compact-flash-card potential-security-vulnerability hp-procurve

13:33
HP Security Bulletin HPSBPV02754 SSRT100803 2
» ‎ Packet Storm Security Misc. Files

HP Security Bulletin HPSBPV02754 SSRT100803 2 - A potential security vulnerability has been identified with certain HP ProCurve 5400 zl switches using a compact flash card which may contain malware content that is a PC trojan executable. The ProCurve switch operating system is not infected with the malware and the content on the compact flash card has no impact on the operation of the switch. Reuse of the compact flash card in a personal computer and manual execution of the malware content could result in a compromise of that system's integrity. Revision 2 of this advisory.
Tags: malware card security compact-flash-card potential-security-vulnerability hp-procurve

April 23, 2012
15:00
One in Every Five Mac Computers Harbors Malware, Sophos Research Reveals
» ‎ Sophos security news

One in Every Five Mac Computers Harbors Malware, Sophos Research Reveals
Tags: research sophos malware mac-computers

April 18, 2012
21:27
[Video] Adventures in analyzing Stuxnet
» ‎ SecDocs

Authors: Bruce Dang Peter Ferrie
Tags: malware malware analysis Stuxnet
Event: Chaos Communication Congress 27th (27C3) 2010
Abstract: There has been many publications on the topic of Stuxnet and its "sophistication" in the mainstream press. However, there is not a complete publication which explains all of the technical vulnerability details and how they were discovered. In this talk, you will get a first-hand account of the entire story. We will discuss various techniques used in analyzing Stuxnet. First, we will share several tricks that were used to quickly identify the vulnerabilities. Second, we describe the thought processes that went into debugging and triaging the vulnerabilities themselves. Finally, we show some tips that you can use if you feel like decompiling stuff for fun :).
Tags: malware video stuxnet bruce-dang peter-ferrie chaos-communication-congress technical-vulnerability mainstream-press
21:27
[Audio] Adventures in analyzing Stuxnet
» ‎ SecDocs

Authors: Bruce Dang Peter Ferrie
Tags: malware malware analysis Stuxnet
Event: Chaos Communication Congress 27th (27C3) 2010
Abstract: There has been many publications on the topic of Stuxnet and its "sophistication" in the mainstream press. However, there is not a complete publication which explains all of the technical vulnerability details and how they were discovered. In this talk, you will get a first-hand account of the entire story. We will discuss various techniques used in analyzing Stuxnet. First, we will share several tricks that were used to quickly identify the vulnerabilities. Second, we describe the thought processes that went into debugging and triaging the vulnerabilities themselves. Finally, we show some tips that you can use if you feel like decompiling stuff for fun :).
Tags: malware audio stuxnet bruce-dang peter-ferrie chaos-communication-congress technical-vulnerability mainstream-press

April 16, 2012
9:00
Bugtraq: APPLE-SA-2012-04-13-1 Flashback malware removal tool
» ‎ SecurityFocus Vulnerabilities

APPLE-SA-2012-04-13-1 Flashback malware removal tool
Tags: malware flashback removal removal-tool bugtraq

3:38
Android Trojan Targets Japanese Market – Steals Personal Data
» ‎ Darknet

Early last year we wrote about China Facing Problems With Android Handsets & Pre-installed Trojans, then later last year there was a possibility Cybercrooks May Be Able To Force Mobile Phones To Send Premium-Rate SMS Messages. The latest news about Android malware is malicious apps that are in the official Google marketplace (called Play)...

Read the full post at darknet.org.uk

Tags: year trojan android read china google darknet japanese-market malware

April 11, 2012
20:49
Malware-Infected Flash Card Shipped Out With HP Switches
» ‎ Packet Storm Security Headlines

Malware-Infected Flash Card Shipped Out With HP Switches
Tags: infected malware flash hp-switches flash-card

April 09, 2012
21:19
Malware Removal Guide For Windows
» ‎ Packet Storm Security Recent Files

Malware Removal Guide for Windows was written to help remove most malicious software on a Windows operation system.
Tags: malware removal windows windows-operation malicious-software removal-guide

21:19
Malware Removal Guide For Windows
» ‎ Packet Storm Security Misc. Files

Malware Removal Guide for Windows was written to help remove most malicious software on a Windows operation system.
Tags: malware removal windows windows-operation malicious-software removal-guide

April 05, 2012
8:23
Fake Angry Bird Apps Hide Android-Rooting Malware
» ‎ Packet Storm Security Headlines

Fake Angry Bird Apps Hide Android-Rooting Malware
Tags: fake angry bird hide-android- malware
8:20
Half A Million Mac Computers 'Infected With Malware'
» ‎ Packet Storm Security Headlines

Half A Million Mac Computers 'Infected With Malware'
Tags: million infected malware mac-computers half-a-million

April 04, 2012
7:32
Hook Analyser Malware Tool 1.4
» ‎ Packet Storm Security Misc. Files

Hook Analyser is a hook tool which can be potentially helpful in reversing applications and analysing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.
Tags: analyser hook malware hook-tool tool-1 analysing

April 03, 2012
19:20
Update Of Android Malware Uses Exploit To Take Over
» ‎ Packet Storm Security Headlines

Update Of Android Malware Uses Exploit To Take Over
Tags: update malware android
March 30, 2012
7:59
Android Trojan Malware Targets Gamers
» ‎ Packet Storm Security Headlines

Android Trojan Malware Targets Gamers
Tags: malware trojan android

March 29, 2012
15:22
[Video] Print Me If You Dare
» ‎ SecDocs

Authors: Ang Cui Jonathan Voris
Tags: hardware hacking
Event: Chaos Communication Congress 28th (28C3) 2011
Abstract: Network printers are ubiquitous fixtures within the modern IT infrastructure. Residing within sensitive networks and lacking in security, these devices represent high-value targets that can theoretically be used not only to manipulate and exfiltrate the sensitive information such as network credentials and sensitive documents, but also as fully functional general-purpose bot-nodes which give attackers a stealthy, persistent foothold inside the victim network for further recognizance, exploitation and exfiltration. We first present several generic firmware modification attacks against HP printers. Weaknesses within the firmware update process allows the attacker to make arbitrary modifications to the NVRAM contents of the device. The attacks we present exploit a functional vulnerability common to all HP printers, and do not depend on any specific code vulnerability. These attacks cannot be prevented by any authentication mechanism on the printer, and can be delivered over the network, either directly or through a print server (active attack) and as hidden payloads within documents (reflexive attack). In order to demonstrate these firmware modification attacks, we present a detailed description of several common HP firmware RFU (remote firmware update) formats, including the general file format, along with the compression and checksum algorithms used. Furthermore, we will release a tool (HPacker), which can unpack existing RFUs and create/pack arbitrary RFUs. This information was obtained by analysis of publicly available RFUs as well as reverse engineering the SPI BootRom contents of several printers. Next, we describe the design and operation a sophisticated piece of malware for HP (P2050) printers. Essentially a VxWorks rootkit, this malware is equipped with: port scanner, covert reverse-IP proxy, print-job snooper that can monitor, intercept, manipulate and exfiltrate incoming print-jobs, a live code update mechanism, and more (see presentation outline below). Lastly, we will demonstrate a self-propagation mechanism, turning this malware into a full-blown printer worm. Using HPacker, we demonstrate the injection of our malware into arbitrary P2050 RFUs, and show how similar malware can be created for other popular HP printer types. Next, we demonstrate the delivery of this modified firmware update over the network to a fully locked-down printer. Lastly, we present an accurate distribution of all HP printers vulnerable to our attack, as determined by our global embedded device vulnerability scanner (see [1]). Our scan is still incomplete, but extrapolating from available data, we estimate that there exist at least 100,000 HP printers that can be compromised through an active attack, and several million devices that can be compromised through reflexive attacks. We will present a detailed breakdown of the geographical and organizational distribution of observable vulnerable printers in the world. *We have also unpacked several engine-control processor firmwares (different from the main SoC) and are currently attempting to locate code related to tracking dots. Perhaps we will have some results by December. In any case, HPacker will help the community to do further research in this direction, possibly allowing us to spoof / disable these yellow dots of burden.
Tags: malware network firmware jonathan-voris chaos-communication-congress hp-printers hp-firmware
15:07
[Audio] Print Me If You Dare
» ‎ SecDocs

Authors: Ang Cui Jonathan Voris
Tags: hardware hacking
Event: Chaos Communication Congress 28th (28C3) 2011
Abstract: Network printers are ubiquitous fixtures within the modern IT infrastructure. Residing within sensitive networks and lacking in security, these devices represent high-value targets that can theoretically be used not only to manipulate and exfiltrate the sensitive information such as network credentials and sensitive documents, but also as fully functional general-purpose bot-nodes which give attackers a stealthy, persistent foothold inside the victim network for further recognizance, exploitation and exfiltration. We first present several generic firmware modification attacks against HP printers. Weaknesses within the firmware update process allows the attacker to make arbitrary modifications to the NVRAM contents of the device. The attacks we present exploit a functional vulnerability common to all HP printers, and do not depend on any specific code vulnerability. These attacks cannot be prevented by any authentication mechanism on the printer, and can be delivered over the network, either directly or through a print server (active attack) and as hidden payloads within documents (reflexive attack). In order to demonstrate these firmware modification attacks, we present a detailed description of several common HP firmware RFU (remote firmware update) formats, including the general file format, along with the compression and checksum algorithms used. Furthermore, we will release a tool (HPacker), which can unpack existing RFUs and create/pack arbitrary RFUs. This information was obtained by analysis of publicly available RFUs as well as reverse engineering the SPI BootRom contents of several printers. Next, we describe the design and operation a sophisticated piece of malware for HP (P2050) printers. Essentially a VxWorks rootkit, this malware is equipped with: port scanner, covert reverse-IP proxy, print-job snooper that can monitor, intercept, manipulate and exfiltrate incoming print-jobs, a live code update mechanism, and more (see presentation outline below). Lastly, we will demonstrate a self-propagation mechanism, turning this malware into a full-blown printer worm. Using HPacker, we demonstrate the injection of our malware into arbitrary P2050 RFUs, and show how similar malware can be created for other popular HP printer types. Next, we demonstrate the delivery of this modified firmware update over the network to a fully locked-down printer. Lastly, we present an accurate distribution of all HP printers vulnerable to our attack, as determined by our global embedded device vulnerability scanner (see [1]). Our scan is still incomplete, but extrapolating from available data, we estimate that there exist at least 100,000 HP printers that can be compromised through an active attack, and several million devices that can be compromised through reflexive attacks. We will present a detailed breakdown of the geographical and organizational distribution of observable vulnerable printers in the world. *We have also unpacked several engine-control processor firmwares (different from the main SoC) and are currently attempting to locate code related to tracking dots. Perhaps we will have some results by December. In any case, HPacker will help the community to do further research in this direction, possibly allowing us to spoof / disable these yellow dots of burden.
Tags: malware network firmware jonathan-voris chaos-communication-congress hp-printers hp-firmware

March 26, 2012
10:09
Chrome Extensions Malware Hijacks Facebook Profiles
» ‎ Packet Storm Security Headlines

Chrome Extensions Malware Hijacks Facebook Profiles
Tags: malware extension profiles
March 23, 2012
17:09
Detecting And Removing The Flashback Malware In OS X
» ‎ Packet Storm Security Headlines

Detecting And Removing The Flashback Malware In OS X
Tags: flashback removing detecting malware os-x
March 15, 2012
8:25
Mobile Banking Security Bypassed In Fiendish Malware Blag
» ‎ Packet Storm Security Headlines

Mobile Banking Security Bypassed In Fiendish Malware Blag
Tags: banking mobile security banking-security mobile-banking malware
March 12, 2012
17:05
Symantec Warns Of Spread Of Mobile Malware Via Twitter
» ‎ Packet Storm Security Headlines

Symantec Warns Of Spread Of Mobile Malware Via Twitter
Tags: spread symantec warns malware
March 07, 2012
8:31
2 In 3 Android Anti-Malware Scanners Not Up To The Job
» ‎ Packet Storm Security Headlines

2 In 3 Android Anti-Malware Scanners Not Up To The Job
Tags: anti malware android scanners job

March 05, 2012
11:06
Hacker On Hacker Action – Zeus Botmaster Targets Anonymous Supporters
» ‎ Darknet

It somehow reminds me of the oldskool game Spy vs Spy, anyone remember that? Anyhow, that’s off-topic right now. The news is, some smart malware pimp managed to dupe a whole bunch of Anonymous supporters into installing the Zeus botnet – when they thought they were getting a DDoS tool. It’s a pretty big base [...]

Read the full post at darknet.org.uk

Tags: hacker spy anonymous read zeus zeus-botmaster game-spy ddos-tool botmaster malware

February 21, 2012
19:11
Malware Levels Starting To Show Signs Of Slowing
» ‎ Packet Storm Security Headlines

Malware Levels Starting To Show Signs Of Slowing
Tags: show malware levels signs
February 16, 2012
8:32
Mobile Malware Rises 155 Percent As Android Grows
» ‎ Packet Storm Security Headlines

Mobile Malware Rises 155 Percent As Android Grows
Tags: grows rise malware android
February 10, 2012
22:59
RootSmart Android Malware Analysis
» ‎ Packet Storm Security Headlines

RootSmart Android Malware Analysis
Tags: malware android rootsmart
14:07
Malware Devs Embrace Open Source
» ‎ Packet Storm Security Headlines

Malware Devs Embrace Open Source
Tags: devs malware embrace open-source
14:07
Mobile Security Researchers Warn Of Evolving Android Malware
» ‎ Packet Storm Security Headlines

Mobile Security Researchers Warn Of Evolving Android Malware
Tags: mobile researchers security security-researchers mobile-security malware

February 01, 2012
21:41
[Slides] Taming Worms, RATs, Dragons and More!
» ‎ SecDocs

Authors: Christiaan Beek
Tags: malware intelligence malware analysis
Event: Black Hat Abu Dhabi 2011
Abstract: Over years the use of malware has dramatically changed. Ranging from programmers exploring the malicious possibilities of their programming code, copycats trying to combine code snippets, to organized crime and governments using custom made malware for their purposes. Where financial gratification is the main drive for cybercrime, it seems that the hunger for secrets and intellectual property is taking over. Some examples of cases are: Operation Aurora, Night-Dragon and recently Shady-RAT. These are examples of investigations that started with the detection of unknown customized malware, hiding on corporate networks and ended in large investigations regarding Data Loss. So how is it possible that this malware was undetected? How can you detect hidden malware on your network using open-source tools, what patterns to look for? What countermeasures can you take? How to build a layered malware defense to keep unknown malware out of your network. In my talk I will give some demo's how you can use Wireshark to investigate networkdata for traces of malware, how to filter for suspicious connections.
Tags: malware network code aurora abu-dhabi open-source-tools using-open-source-tools night-dragon

January 30, 2012
21:36
WordPress Targeted In Malware Attack
» ‎ Packet Storm Security Headlines

WordPress Targeted In Malware Attack
Tags: wordpress targeted malware

January 26, 2012
13:49
[Slides] Malware on the Net - Behind the Scenes
» ‎ SecDocs

Authors: Iftach Ian Amit
Tags: malware
Event: Black Hat EU 2008

Tags: authors malware scenes ian-amit-tags black-hat amit slides
13:49
[Paper] Malware on the Net - Behind the Scenes
» ‎ SecDocs

Authors: Iftach Ian Amit
Tags: malware
Event: Black Hat EU 2008

Tags: malware scenes paper ian-amit-tags black-hat amit

January 25, 2012
7:58
Super Powered Malware Sandwiches Found In The Wild – Frankenmalware
» ‎ Darknet

Now this is quite a fascinating story, especially if you know anything about Malware and have interests in that area. It seems the latest development is the accidental development of new super-malware strains created by viruses infecting executable files of worms. Worms are generally executable files and well, viruses infect executables – so...

Read the full post at darknet.org.uk

Tags: super malware development read darknet executable-files strains malware

January 19, 2012
8:04
Carberp Malware Targets Facebook Users
» ‎ Packet Storm Security Headlines

Carberp Malware Targets Facebook Users
Tags: carberp malware target targets

January 18, 2012
21:49
[Paper] Combatting Symbian Malware
» ‎ SecDocs

Authors: Jarno Niemelä
Tags: malware phone
Event: Black Hat Federal 2006

Tags: malware symbian paper black-hat

15:54
Malware Reverse Engineering Part 1 - Static Analysis
» ‎ Packet Storm Security Recent Files

This malware report is part 1 of 2. This report is an effort to track, categorize, contain, understand root cause and infection vector of said user account/s, networked equipment or computer/s. This report pertains to all incidents reported by TIER II help desk, TIER III engineers, customer complaints or random IT Security audit/finding/pen test.
Tags: part report malware networked-equipment static-analysis tier-ii

15:54
Malware Reverse Engineering Part 1 - Static Analysis
» ‎ Packet Storm Security Misc. Files

This malware report is part 1 of 2. This report is an effort to track, categorize, contain, understand root cause and infection vector of said user account/s, networked equipment or computer/s. This report pertains to all incidents reported by TIER II help desk, TIER III engineers, customer complaints or random IT Security audit/finding/pen test.
Tags: part report malware networked-equipment static-analysis tier-ii

January 16, 2012
9:08
Hackers Spread Malware Via Children's Gaming Sites
» ‎ Packet Storm Security Headlines

Hackers Spread Malware Via Children's Gaming Sites
Tags: hackers spread malware gaming-sites

January 15, 2012
21:31
[Paper] Combatting Symbian Malware
» ‎ SecDocs

Authors: Jarno Niemelä
Tags: malware phone
Event: Black Hat EU 2006

Tags: malware symbian paper black-hat
January 14, 2012
21:34
[Slides] Combatting Symbian Malware
» ‎ SecDocs

Authors: Jarno Niemelä
Tags: malware phone
Event: Black Hat EU 2006

Tags: authors malware symbian black-hat slides
January 13, 2012
21:49
[Slides] Malware Cinema: A Picture is Worth a Thousand Packets
» ‎ SecDocs

Authors: Gregory Conti
Tags: malware
Event: Black Hat EU 2006

Tags: cinema malware picture gregory-conti black-hat conti slides
January 09, 2012
21:35
[Slides] RFID Malware Demystified
» ‎ SecDocs

Authors: Melanie Rieback
Tags: RFID
Event: Black Hat USA 2006

Tags: malware demystified rfid melanie-rieback usa black-hat slides
January 06, 2012
21:49
[Slides] Hacking Intranet Websites from the Outside "JavaScript malware just got a lot more dangerous"
» ‎ SecDocs

Authors: Jeremiah Grossman
Tags: web application malware Javascript
Event: Black Hat USA 2006

Tags: malware javascript hacking jeremiah-grossman usa intranet-websites black-hat

January 05, 2012
8:38
Ramnit Worm Stealing Facebook Account Passwords, E-mail Address & Bank Details
» ‎ Darknet

Oh look, another Facebook worm – this one seems pretty nasty and as usual it’s going for Facebook access details and then diving into banking credentials if it can find them. It’s mostly targeted at the UK though, worms of these type usually are geographically limited as they are targeting bank information – it’s...

Read the full post at darknet.org.uk

Tags: facebook worm bank read e-mail-address account-passwords bank-information malware

January 01, 2012
21:35
[Slides] Catching Malware to Detect, Track and Mitigate Botnets
» ‎ SecDocs

Authors: Georg Wicherski Thorsten Holz
Tags: malware botnet
Event: Black Hat Asia 2006

Tags: track detect malware georg-wicherski thorsten-holz asia black-hat thorsten

December 23, 2011
8:32
Amnesty International UK Compromised, Serving Exploits And Malware
» ‎ Packet Storm Security Headlines

Amnesty International UK Compromised, Serving Exploits And Malware
Tags: international compromised amnesty amnesty-international-uk malware exploits
December 14, 2011
18:36
Android Malware Hits Million Users In First Half Of 2011
» ‎ Packet Storm Security Headlines

Android Malware Hits Million Users In First Half Of 2011
Tags: malware android hits

December 09, 2011
7:59
[Paper] Hide 'n' Seek? Anatomy of Stealth Malware
» ‎ SecDocs

Authors: Gergely Erdelyi
Tags: malware
Event: Black Hat EU 2004

Tags: anatomy malware paper hide black-hat stealth
7:57
[Slides] Hide 'n' Seek? Anatomy of Stealth Malware
» ‎ SecDocs

Authors: Gergely Erdelyi
Tags: malware
Event: Black Hat EU 2004

Tags: anatomy malware stealth hide black-hat

December 08, 2011
8:17
Download.com Adding Malware To Nmap
» ‎ Packet Storm Security Advisories

This is Fyodor's latest update on the CNET Download.com fiasco where they are packaging third party software with their own additions.
Tags: download malware com fyodor third-party-software fiasco

8:17
Download.com Adding Malware To Nmap
» ‎ Packet Storm Security Recent Files

This is Fyodor's latest update on the CNET Download.com fiasco where they are packaging third party software with their own additions.
Tags: download malware com fyodor third-party-software fiasco

8:17
Download.com Adding Malware To Nmap
» ‎ Packet Storm Security Misc. Files

This is Fyodor's latest update on the CNET Download.com fiasco where they are packaging third party software with their own additions.
Tags: download malware com fyodor third-party-software fiasco

December 07, 2011
8:07
Using Google As A Malware Spreading Technique
» ‎ Packet Storm Security Recent Files

This is a short whitepaper discussing how to use Google as a malware spreading tool.
Tags: malware google spreading whitepaper

8:07
Using Google As A Malware Spreading Technique
» ‎ Packet Storm Security Misc. Files

This is a short whitepaper discussing how to use Google as a malware spreading tool.
Tags: malware google spreading whitepaper

December 06, 2011
21:22
Android's Popularity Makes It Open Target For Malware, Says Study
» ‎ Packet Storm Security Headlines

Android's Popularity Makes It Open Target For Malware, Says Study
Tags: makes popularity android open-target malware
December 03, 2011
10:56
Malware Writers Launch 'Electronic Payment' Malware Attack
» ‎ Packet Storm Security Headlines

Malware Writers Launch 'Electronic Payment' Malware Attack
Tags: launch malware writers electronic-payment
November 29, 2011
21:33
Zeus Malware Takes To Facebook For New Victims
» ‎ Packet Storm Security Headlines

Zeus Malware Takes To Facebook For New Victims
Tags: facebook new takes zeus-malware zeus malware
November 16, 2011
7:51
Android Leads The Way In Mobile Malware
» ‎ Packet Storm Security Headlines

Android Leads The Way In Mobile Malware
Tags: mobile malware android the-way
November 15, 2011
7:27
Mystery Malware Poisons NZ Ambulance System
» ‎ Packet Storm Security Headlines

Mystery Malware Poisons NZ Ambulance System
Tags: poisons mystery malware ambulance-system
7:26
Mobile Malware And Targeted Attacks To Proliferate In 2012
» ‎ Packet Storm Security Headlines

Mobile Malware And Targeted Attacks To Proliferate In 2012
Tags: mobile targeted malware

November 14, 2011
7:53
Hook Analyser Malware Tool 1.3
» ‎ Packet Storm Security Recent Files

Hook analyser is a hook tool which can be potentially helpful in reversing applications and analysing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.
Tags: analyser hook malware hook-tool tool-1 analysing

7:53
Hook Analyser Malware Tool 1.3
» ‎ Packet Storm Security Tools

Hook analyser is a hook tool which can be potentially helpful in reversing applications and analysing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.
Tags: analyser hook malware hook-tool tool-1 analysing

7:53
Hook Analyser Malware Tool 1.3
» ‎ Packet Storm Security Misc. Files

Hook analyser is a hook tool which can be potentially helpful in reversing applications and analysing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.
Tags: analyser hook malware hook-tool tool-1 analysing

7:32
Freebie Android Anti-Malware Scanners Flunk Test
» ‎ Packet Storm Security Headlines

Freebie Android Anti-Malware Scanners Flunk Test
Tags: malware android freebie anti-malware scanners

November 13, 2011
21:52
[Slides] Neutralizing Nimda: Automated Strikeback
» ‎ SecDocs

Authors: Tim Mullen
Tags: malware virus malware analysis
Event: Black Hat Asia 2002

Tags: neutralizing malware nimda tim-mullen asia black-hat slides

November 07, 2011
8:01
Bugtraq: Malware detection evasion in antivirus software
» ‎ SecurityFocus Vulnerabilities

Malware detection evasion in antivirus software
Tags: evasion malware detection

7:27
Antivirus Software Bypass
» ‎ Packet Storm Security Advisories

Various antivirus software on Windows fails to detect, block and/or move malware if the executable file has only execution permission and no read, write, or other bits set.
Tags: antivirus bypass Software executable-file malware execution

7:27
Antivirus Software Bypass
» ‎ Packet Storm Security Recent Files

Various antivirus software on Windows fails to detect, block and/or move malware if the executable file has only execution permission and no read, write, or other bits set.
Tags: antivirus bypass Software executable-file malware execution

7:27
Antivirus Software Bypass
» ‎ Packet Storm Security Misc. Files

Various antivirus software on Windows fails to detect, block and/or move malware if the executable file has only execution permission and no read, write, or other bits set.
Tags: antivirus bypass Software executable-file malware execution

7:22
Smartphone Scams: Owners Warned Over Malware Apps
» ‎ Packet Storm Security Headlines

Smartphone Scams: Owners Warned Over Malware Apps
Tags: smartphone malware scams apps
October 31, 2011
8:49
Don't Let Halloween Malware Haunt Your PC
» ‎ Packet Storm Security Headlines

Don't Let Halloween Malware Haunt Your PC
Tags: malware don halloween
October 28, 2011
14:10
Tsunami Trojan Malware Bot Ported To OS X
» ‎ Packet Storm Security Headlines

Tsunami Trojan Malware Bot Ported To OS X
Tags: tsunami malware trojan os-x
October 15, 2011
17:13
Drone Nerve Centre Malware Was Mafia Wars' Infostealer
» ‎ Packet Storm Security Headlines

Drone Nerve Centre Malware Was Mafia Wars' Infostealer
Tags: nerve malware centre mafia-wars nerve-centre drone

October 10, 2011
2:23
[Slides] Latest Advances in Honeynet Technologies
» ‎ SecDocs

Tags: malware analysis honeypot
Event: Black Hat USA 2003

Tags: malware honeynet tags usa black-hat slides
October 05, 2011
5:14
[Slides] Latest Advances in Honeynet Technologies
» ‎ SecDocs

Tags: malware analysis honeypot
Event: Black Hat Federal 2003

Tags: malware honeynet tags black-hat slides

October 03, 2011
16:33
Malware Analyser 3.3
» ‎ Packet Storm Security Recent Files

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: dynamic-analysis malware

16:33
Malware Analyser 3.3
» ‎ Packet Storm Security Tools

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis
16:33
Malware Analyser 3.3
» ‎ Packet Storm Security Tools

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

16:33
Malware Analyser 3.3
» ‎ Packet Storm Security Misc. Files

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

September 30, 2011
11:11
[Slides] Honeypots Against Worms 101
» ‎ SecDocs

Authors: Laurent Oudot
Tags: malware malware analysis honeypot
Event: Black Hat Asia 2003

Tags: malware authors honeypots laurent-oudot asia black-hat worms

September 26, 2011
23:02
MySQL.com Compromised & Spreading Malware
» ‎ Darknet

The latest story doing the rounds is that MySQL.com got hacked and was serving malware which put it on the Google malware block list. It appears to be in the clear now though and it’s accessible again via Google. It seems to be a similar case with that of the recent Linux.com and Kernel.org hacks [...]

Read the full post at darknet.org.uk

Tags: malware com mysql read doing-the-rounds darknet google database hacking

14:28
Mac Malware Discovered Hidden Inside PDF
» ‎ Packet Storm Security Headlines

Mac Malware Discovered Hidden Inside PDF
Tags: hidden pdf discovered mac-malware malware

13:18
[Slides] dirtbox, a highly scalable x86/Windows Emulator
» ‎ SecDocs

Authors: Georg Wicherski
Tags: virtual machine malware malware analysis
Event: Black Hat USA 2010
Abstract: The increasing amount of new malware each day does not only put anti-virus companies up to new limits handling these samples for detection by creating new signatures. But also for network security providers and administrators, getting information on how samples affect the networks they try to protect is an increasing problem. Dynamic analysis of malware by execution in sandboxes has been an approach that has been successfully applied in both of these problem scenarios, however classic sandbox approaches clearly suffer from severe scalability problems. Most of these rely on setting up a real target system such as the Windows XP operating system as a virtual machine with additional software that does logging of performed actions. While these are easy to develop and set up, they require a separate virtual machine instance for each malware sample to be analyzed and therefore do not scale up with today's requirements in terms of malware growth. Anti-Virus vendors tried to circumvent performance issues for file analysis by developing custom emulators that can be deployed on a customer end-host for detection and do not require a whole operating system inside a virtual machine. These emulators however often are software interpreters for the x86 instruction set and run therefore into execution speed limitations on their own. Additionally, they suffer from detectability because they try to emulate every single Windows API but suffer from accuracy issues. dirtbox is an attempt to implement a highly scalable x86/Windows emulator that can be both used for simple malware detection and detailed behavior analysis reports. Instead of emulating every single x86 instruction in software, malware instructions are executed directly on the host CPU in a per basic block fashion. A disassembling run on each basic block ensures that no privileged or control flow subverting instructions are executed. The notion of virtual memory that is separated from the emulators memory is employed by special LDT segments and switching segment selectors before executing guest instructions. Since no instrumentation alike instruction rewriting is being done, disassembler results per basic block can be cached and all execution happens in the same process without context-switches, a high grade of performance is achieved. The operating system is emulated at the syscall layer. While this layer is mostly undocumented and implementing it in an accurate fashion is a challenging task on its own, the fact that no register changes are leaked from Ring 0 thwarts a lot of detection techniques. For usage of the high-level APIs, corresponding libraries are directly mapped into the virtual memory as well.
Tags: malware machine windows georg-wicherski usa classic-sandbox target-system problem-scenarios
September 20, 2011
11:15
[Paper] Malware Freak Show 2010: The Client-Side Boogaloo
» ‎ SecDocs

Authors: Jibran Ilyas Nicholas J. Percoco
Tags: malware cybercrime malware analysis
Event: Black Hat USA 2010
Abstract: We had a busy year. We investigated over 200 incidents in 24 different countries. We ended up collecting enough malware freaks [samples] to fill up Kunstkammer a few times over. Building upon last year's DEFCON talk, we want to dive deeper and bring you the most interesting samples from around the world - including one that made international headlines and the rest we're positive no one's ever seen before (outside of us and the kids who wrote them). This talk will bring you 4 new freaks and 4 new victims including: a Sports Bar in Miami, Online Adult Toy Store, US Defense Contractor, and an International VoiP Provider. The malware we are going to demo are very advanced pieces of software written by very skilled developers. The complexity in their propagation, control channels, anti-forensic techniques and data exporting properties will be very interesting to anyone interested in this topic.
Tags: talk year malware nicholas-j.-percoco usa miami adult-toy-store skilled-developers freak-show
11:15
[Slides] Malware Freak Show 2010: The Client-Side Boogaloo
» ‎ SecDocs

Authors: Jibran Ilyas Nicholas J. Percoco
Tags: malware cybercrime malware analysis
Event: Black Hat USA 2010
Abstract: We had a busy year. We investigated over 200 incidents in 24 different countries. We ended up collecting enough malware freaks [samples] to fill up Kunstkammer a few times over. Building upon last year's DEFCON talk, we want to dive deeper and bring you the most interesting samples from around the world - including one that made international headlines and the rest we're positive no one's ever seen before (outside of us and the kids who wrote them). This talk will bring you 4 new freaks and 4 new victims including: a Sports Bar in Miami, Online Adult Toy Store, US Defense Contractor, and an International VoiP Provider. The malware we are going to demo are very advanced pieces of software written by very skilled developers. The complexity in their propagation, control channels, anti-forensic techniques and data exporting properties will be very interesting to anyone interested in this topic.
Tags: talk year malware nicholas-j.-percoco usa miami adult-toy-store skilled-developers freak-show
September 16, 2011
0:26
[Slides] App Attack: Surviving the Mobile Application Explosion
» ‎ SecDocs

Authors: Kevin Mahaffey John Hering
Tags: malware malware analysis phone
Event: Black Hat USA 2010
Abstract: The mobile app revolution is upon us. Applications on your smartphone know more about you than anyone or anything else in the world. Apps know where you are, who you talk to, and what you're doing on the web; they have access to your financial accounts, can trigger charges to your phone bill, and much more. Have you ever wondered what smartphone apps are actually doing under the hood? We built the largest-ever mobile application security dataset to find out. Mobile apps have grown tremendously both in numbers and capabilities over the past few years with hundreds of thousands of apps and billions of downloads. Such a wealth of data and functionality on each phone and a massive proliferation of apps that can access them are driving a new wave of security implications. Over the course of several months, we gathered both application binaries and meta-data about applications on the most popular smartphone platforms and built tools to analyze the data en masse. The results were surprising. Not only do users have very little insight into what happens in their apps, neither do the developers of the applications themselves. In this talk we're going to share the results of our research, demonstrate a new class of mobile application vulnerability, show how we can quickly find out if anyone in the wild is exploiting it, and discuss the future of mobile application security and mobile malware.
Tags: malware application phone usa massive-proliferation application-binaries mobile-apps

September 15, 2011
11:37
Security Firms: Android Malware Set To Skyrocket
» ‎ Packet Storm Security Headlines

Security Firms: Android Malware Set To Skyrocket
Tags: malware android security security-firms

September 13, 2011
7:29
Hook Analyser Malware Tool
» ‎ Packet Storm Security Recent Files

Hook analyser is a hook tool which can be potentially helpful in reversing applications and analysing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.
Tags: analyser hook malware hook-tool analysing api

7:29
Hook Analyser Malware Tool
» ‎ Packet Storm Security Misc. Files

Hook analyser is a hook tool which can be potentially helpful in reversing applications and analysing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.
Tags: analyser hook malware hook-tool analysing api

September 11, 2011
7:17
[Slides] You will be billed $90,000 for this call
» ‎ SecDocs

Authors: Mikko Hypponen
Tags: malware phone
Event: Black Hat USA 2010
Abstract: Computers do not have a built-in billing system. Phones do: it's called the phone bill. We have already seen the first examples of money-making malware that infects various types of smartphones. This talk will go into details of the currently known smartphone trojans that either place calls or send text messages to expensive premium-rate numbers. How does this work technically? Which platforms are at risk? What kind of premium-rate numbers are the criminals using? How do they route the money back to them without getting caught? And what can we do about this before it gets worse?
Tags: malware phone call usa premium-rate-numbers system-phones black-hat
September 08, 2011
10:41
[Paper] mod_antimalware: a novel apache module for containing web-based malware infections
» ‎ SecDocs

Authors: Neil Daswani
Tags: malware web server Apache
Event: Black Hat USA 2010
Abstract: Drive-by downloads planted on legitimate sites (e.g., via "structural" and other vulnerabilities in web applications) cause web sites to get blacklisted by Google, Yahoo, and other search engines and browsers. In this talk, I describe the technical architecture and implementation of mod_antimalware, a novel, open-source containment technology for web servers that can be used to 1) quarantine web-based malware infections before they impact users, 2) allow web pages to safely be served even while a site is infected, and 3) give webmasters time to recover from an attack before their web sites get blacklisted by popular search engines and browsers.
Tags: malware web mod neil-daswani usa web-server-apache other-search-engines
10:41
[Slides] mod_antimalware: a novel apache module for containing web-based malware infections
» ‎ SecDocs

Authors: Neil Daswani
Tags: malware web server Apache
Event: Black Hat USA 2010
Abstract: Drive-by downloads planted on legitimate sites (e.g., via "structural" and other vulnerabilities in web applications) cause web sites to get blacklisted by Google, Yahoo, and other search engines and browsers. In this talk, I describe the technical architecture and implementation of mod_antimalware, a novel, open-source containment technology for web servers that can be used to 1) quarantine web-based malware infections before they impact users, 2) allow web pages to safely be served even while a site is infected, and 3) give webmasters time to recover from an attack before their web sites get blacklisted by popular search engines and browsers.
Tags: malware web mod neil-daswani usa web-server-apache other-search-engines

7:29
Non-Financial Malware Is Being Repurposed For Fraud
» ‎ Packet Storm Security Headlines

Non-Financial Malware Is Being Repurposed For Fraud
Tags: malware financial NON fraud

September 07, 2011
19:23
Dissecting Andro Malware
» ‎ Packet Storm Security Recent Files

This white paper aims to understand the operation of an Android malware named "*DroidKungFu 2 - A*" and investigate the parameters, code and structure which is created or modified by this malware. It also highlights the mitigation steps which requires the user and the developer to be proactive.
Tags: andro dissecting malware mitigation-steps android

19:23
Dissecting Andro Malware
» ‎ Packet Storm Security Misc. Files

This white paper aims to understand the operation of an Android malware named "*DroidKungFu 2 - A*" and investigate the parameters, code and structure which is created or modified by this malware. It also highlights the mitigation steps which requires the user and the developer to be proactive.
Tags: andro dissecting malware mitigation-steps android

September 05, 2011
13:13
[Slides] Goodware drugs for malware: on-the-fly malware analysis and containment
» ‎ SecDocs

Authors: Christiaan Schade Damiano Bolzoni
Tags: malware malware analysis
Event: Black Hat USA 2010
Abstract: In this presentation we will show a new approach to perform on-the-fly malware analysis (even of previously unknown malware), without the need of deploying any instrumentation at the end host before hand. Our approach leverages the fact that malware quite often comes as a small (in size) "spore", which is then responsible for making the malware persistent on the targeted host and download additional components ("eggs"). Eggs usually come in the shape of executables or DLLs, and extend the capabilities of the spore (password grabbing, URL redirection, etc.) Our system, we call it Avatar, detect failed attempts to download eggs, and ships back to the suspected malware what we call a "red pill". When the malware executes the red pill, this performs some preliminary checks and can send to an instrumented host a copy of the parent process' executable. In this instrumented (i.e., sand-boxed) environment it is possible to perform real-time analysis of the suspicious program. The red pill can be then remotely instrumented to terminate the monitored process, in case it appears to be a real threat. By doing so, it is possible to effectively contain a large infection.
Tags: malware analysis host usa time-analysis black-hat
September 04, 2011
2:57
[Slides] Virt-ICE: next generation debugger for malware analysis
» ‎ SecDocs

Authors: Kuniyasu Suzaki Quynh Nguyen Anh
Tags: malware debugger malware analysis
Event: Black Hat USA 2010
Abstract: Dynamic malware analysis is an important method to analyze malware. The most important tool for dynamic malware analysis is debugger. However, because debuggers are originally built by software developers to debug legitimate software, they have some significant flaws against malware. First of all, malware can easily detect the presence of debugger with various tricks. Another fundamental problem is that because malware run in the same security domain with debugger, they can potentially tamper with the debugger, and prevent it from functioning correctly. Unfortunately, all of the above drawbacks are unfixable in the current architecture. This research presents a new debugger named Virt-ICE, which is designed to address the problems of current malware debuggers. Using virtualization technology, Virt-ICE is totally invisible to malware, thus renders most available anti-debugging techniques useless. Thanks to the isolation provided by virtual machine, Virt-ICE is out of the reach of malware, and cannot be tampered with. Another advantage of Virt-ICE is that unlike many other popular debuggers, it can deal with ring-0 code, therefore it has no issue handling kernel rootkits. Virt-ICE also offers a novel event-based method to intercept malware execution, which can help to improve the debugging efficiency. Finally, Virt-ICE includes some built-in automatic malware analysis facilities to give the analysts more information on malware, so they can reduce the time on the job by focusing their debugging efforts on important points. We conclude the talk with some live demos to show how Virt-ICE can debug some real malware.
Tags: malware ice debugger usa quynh-nguyen nguyen-anh current-architecture

August 29, 2011
19:03
Malheur Malware Analyzer 0.5.2
» ‎ Packet Storm Security Recent Files

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

19:03
Malheur Malware Analyzer 0.5.2
» ‎ Packet Storm Security Tools

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

19:03
Malheur Malware Analyzer 0.5.2
» ‎ Packet Storm Security Misc. Files

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

August 27, 2011
10:01
[Video] Apple iOS 4 Privacy
» ‎ SecDocs

Authors: Nicolas Seriot
Tags: malware iPhone rootkit
Event: Hashdays 2010
Abstract: Apple's AppStore moves the burden of security management from the user to the vendor. Apple semi-automatically verifies each of the 200.000 applications and their updates. Moreover, when an application is downloaded on the iPhone, a sandboxing mechanism is supposed to prevent it from reading other applications' data. We showed at Black Hat DC 2010 that such a schema did not prevent malware from reaching the App Store and harvesting personal data. This talk will discuss the current state of iOS 4 privacy and show to what extent iOS 4 fixes the issues raised earlier this year. We will also present some findings about another possible frauds happening inside the App Store eco-system such as "App Farms", which basically consists in artificially boosting applications ratings with stolen accounts.
Tags: malware privacy app apple-ios nicolas-seriot ios iphone black-hat security-management
10:01
[Slides] Apple iOS 4 Privacy
» ‎ SecDocs

Authors: Nicolas Seriot
Tags: malware iPhone rootkit
Event: Hashdays 2010
Abstract: Apple's AppStore moves the burden of security management from the user to the vendor. Apple semi-automatically verifies each of the 200.000 applications and their updates. Moreover, when an application is downloaded on the iPhone, a sandboxing mechanism is supposed to prevent it from reading other applications' data. We showed at Black Hat DC 2010 that such a schema did not prevent malware from reaching the App Store and harvesting personal data. This talk will discuss the current state of iOS 4 privacy and show to what extent iOS 4 fixes the issues raised earlier this year. We will also present some findings about another possible frauds happening inside the App Store eco-system such as "App Farms", which basically consists in artificially boosting applications ratings with stolen accounts.
Tags: malware privacy app apple-ios nicolas-seriot ios iphone black-hat security-management

August 25, 2011
16:04
Demystifying The Android Malware
» ‎ Packet Storm Security Recent Files

Whitepaper called Demystifying the Android Malware. It dives into various phases to discuss the hows and whys behind malware implementation for Android.
Tags: malware android demystifying whys implementation

16:04
Demystifying The Android Malware
» ‎ Packet Storm Security Misc. Files

Whitepaper called Demystifying the Android Malware. It dives into various phases to discuss the hows and whys behind malware implementation for Android.
Tags: malware android demystifying whys implementation

August 24, 2011
17:39
Malheur Malware Analyzer 0.5.1
» ‎ Packet Storm Security Recent Files

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

17:39
Malheur Malware Analyzer 0.5.1
» ‎ Packet Storm Security Tools

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

17:39
Malheur Malware Analyzer 0.5.1
» ‎ Packet Storm Security Misc. Files

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

August 23, 2011
19:54
Malware Threat On Android Continues To Grow
» ‎ Packet Storm Security Headlines

Malware Threat On Android Continues To Grow
Tags: threat malware android
August 17, 2011
7:22
Spyeye Malware Source Code Is Leaked
» ‎ Packet Storm Security Headlines

Spyeye Malware Source Code Is Leaked
Tags: spyeye malware source source-code
August 16, 2011
20:33
Malware Mints Virtual Currency Using Victim's GPU
» ‎ Packet Storm Security Headlines

Malware Mints Virtual Currency Using Victim's GPU
Tags: malware mints virtual virtual-currency gpu
August 11, 2011
8:49
Love Lure Malware Turns Up At Android Marketplace
» ‎ Packet Storm Security Headlines

Love Lure Malware Turns Up At Android Marketplace
Tags: love malware android marketplace

August 09, 2011
13:52
[Paper] Exploting Similarity Between Variants to Defeat Malware
» ‎ SecDocs

Authors: Andrew Walenstein
Tags: malware malware analysis
Event: Black Hat DC 2007

Tags: exploting malware paper andrew-walenstein black-hat similarity variants
13:52
[Slides] Exploting Similarity Between Variants to Defeat Malware
» ‎ SecDocs

Authors: Andrew Walenstein
Tags: malware malware analysis
Event: Black Hat DC 2007

Tags: similarity exploting malware andrew-walenstein black-hat variants
August 01, 2011
12:58
[Paper] Botnet Tracking: Tools, Techniques, and Lessons Learned
» ‎ SecDocs

Authors: Jose Nazario
Tags: malware botnet malware analysis
Event: Black Hat DC 2007

Tags: malware botnet paper jose jose-nazario tracking-tools black-hat
12:55
[Slides] Botnet Tracking: Tools, Techniques, and Lessons Learned
» ‎ SecDocs

Authors: Jose Nazario
Tags: malware botnet malware analysis
Event: Black Hat DC 2007

Tags: malware botnet tracking jose jose-nazario tracking-tools black-hat
July 29, 2011
13:56
[Paper] Practical Malware Analysis: Fundamental Techniques and a New Method for Malware Discovery
» ‎ SecDocs

Authors: Chad McMillan Kris Kendall
Tags: malware malware analysis
Event: Black Hat DC 2007

Tags: analysis malware paper chad fundamental-techniques black-hat kendall
13:55
[Slides] Practical Malware Analysis: Fundamental Techniques and a New Method for Malware Discovery
» ‎ SecDocs

Authors: Chad McMillan Kris Kendall
Tags: malware malware analysis
Event: Black Hat DC 2007

Tags: practical analysis malware chad fundamental-techniques black-hat kendall

July 22, 2011
7:32
Japanese Man Jailed For Fishy Ika Tako Manga Malware
» ‎ Packet Storm Security Headlines

Japanese Man Jailed For Fishy Ika Tako Manga Malware
Tags: fishy jailed man japanese-man malware ika
July 20, 2011
7:33
Google Now Checks Your Computer For Malware
» ‎ Packet Storm Security Headlines

Google Now Checks Your Computer For Malware
Tags: now malware google

July 16, 2011
8:25
Malware Analyser 3.2
» ‎ Packet Storm Security Recent Files

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

8:25
Malware Analyser 3.2
» ‎ Packet Storm Security Tools

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

8:25
Malware Analyser 3.2
» ‎ Packet Storm Security Misc. Files

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

July 14, 2011
15:08
Gordon Brown Claims Murdoch Staff Also Used Malware To Hack PCs
» ‎ Packet Storm Security Headlines

Gordon Brown Claims Murdoch Staff Also Used Malware To Hack PCs
Tags: malware used hack gordon-brown-claims murdoch-staff gordon-brown
July 11, 2011
19:47
More Malware Targeting Android
» ‎ Packet Storm Security Headlines

More Malware Targeting Android
Tags: targeting malware android
7:05
PC Components Sometimes Preloaded With Malware, Says Official
» ‎ Packet Storm Security Headlines

PC Components Sometimes Preloaded With Malware, Says Official
Tags: official malware preloaded pc-components

July 05, 2011
7:50
Fake Malware And Virus Scanners
» ‎ Packet Storm Security Recent Files

Whitepaper called Fake Malware and Virus Scanners. Rogue security software reports a virus infection, even if your computer is clean. This kind of "software" could also fail to report viruses when your computer is infected. This document show what are the mechanisms to obfuscate this process.
Tags: virus fake malware virus-scanners virus-infection

7:50
Fake Malware And Virus Scanners
» ‎ Packet Storm Security Misc. Files

Whitepaper called Fake Malware and Virus Scanners. Rogue security software reports a virus infection, even if your computer is clean. This kind of "software" could also fail to report viruses when your computer is infected. This document show what are the mechanisms to obfuscate this process.
Tags: virus-scanners virus-infection malware

July 04, 2011
4:06
Security Researchers Discover 4 Million Strong ‘Indestructible’ Botnet – TDSS/TDL
» ‎ Darknet

It’s been recently uncovered that there’s a HUGE botnet, which is extremely advanced and constantly evolving a variant of the ever popular (and usually quite advanced) TDL strain. We did write about a TDL variant earlier in 2010 – TDL AKA Alureon Rootkit Now Infecting 64-Bit Windows 7 Platform. TDL itself has been around several...

Read the full post at darknet.org.uk

Tags: botnet variant tdl read aka-alureon security-researchers darknet 64-bit-windows malware

June 30, 2011
14:35
[Slides] Observing the Tidal Waves of Malware
» ‎ SecDocs

Authors: Stefano Zanero
Tags: malware malware analysis
Event: Black Hat USA 2007

Tags: waves malware tidal stefano-zanero usa tidal-waves black-hat slides

June 12, 2011
11:40
Malware Analyser 3.1
» ‎ Packet Storm Security Recent Files

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

11:40
Malware Analyser 3.1
» ‎ Packet Storm Security Tools

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

11:40
Malware Analyser 3.1
» ‎ Packet Storm Security Misc. Files

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

June 09, 2011
10:07
DroidKungFu Malware Discovered On Android Platform
» ‎ Packet Storm Security Headlines

DroidKungFu Malware Discovered On Android Platform
Tags: droidkungfu malware discovered
May 31, 2011
23:41
Malware From Google Market Menaces Android Users
» ‎ Packet Storm Security Headlines

Malware From Google Market Menaces Android Users
Tags: google market malware
23:41
Apple Ships Removal Tool For Mac Menacing Malware
» ‎ Packet Storm Security Headlines

Apple Ships Removal Tool For Mac Menacing Malware
Tags: malware tool removal apple-ships mac-menacing removal-tool
May 24, 2011
23:58
Apple Opens Up About Mac Defender Malware Infections
» ‎ Packet Storm Security Headlines

Apple Opens Up About Mac Defender Malware Infections
Tags: infections malware apple-opens mac-defender apple

May 23, 2011
4:27
Malware Analyser v3.0 – A Static & Dynamic Malware Analysis Tool
» ‎ Darknet

Malware Analyser is freeware tool to perform static and dynamic analysis on malware executables, it can be used to identify potential traces of anti-debug, keyboard hooks, system hooks and DEP setting change calls in the malware. This is a stepping release since for the first time the Dynamic Analysis has been included for file creations [...]

Read the full post at darknet.org.uk

Tags: analyser analysis malware read dynamic-analysis darknet analysis-tool Countermeasures

May 19, 2011
21:04
Hacker Mind Tricks Increasing Malware Downloads
» ‎ Packet Storm Security Headlines

Hacker Mind Tricks Increasing Malware Downloads
Tags: hacker malware tricks mind-tricks downloads

May 18, 2011
13:16
[Paper] Status of Cell Phone Malware in 2007
» ‎ SecDocs

Authors: Mikko Hypponen
Tags: malware phone
Event: Black Hat USA 2007

Tags: malware phone paper usa black-hat cell-phone
13:15
[Slides] Status of Cell Phone Malware in 2007
» ‎ SecDocs

Authors: Mikko Hypponen
Tags: malware phone
Event: Black Hat USA 2007

Tags: malware phone status usa black-hat slides
May 11, 2011
15:10
[Paper] Stealth Secrets of the Malware Ninjas
» ‎ SecDocs

Authors: Nick Harbour
Tags: forensic malware malware analysis
Event: Black Hat USA 2007

Tags: malware stealth paper nick-harbour usa stealth-secrets black-hat forensic

May 10, 2011
7:35
Canada Moves Up In Malware Badness List
» ‎ Packet Storm Security Headlines

Canada Moves Up In Malware Badness List
Tags: moves badness malware canada

May 03, 2011
7:04
Osama Malware Scams Spread To Facebook
» ‎ Packet Storm Security Headlines

Osama Malware Scams Spread To Facebook
Tags: malware osama scams

April 27, 2011
18:04
Love Bug Malware Inspired Film Gets Big Screen Premiere
» ‎ Packet Storm Security Headlines

Love Bug Malware Inspired Film Gets Big Screen Premiere
Tags: bug inspired malware love
April 26, 2011
8:49
Android Malware Sees Explosive Growth
» ‎ Packet Storm Security Headlines

Android Malware Sees Explosive Growth
Tags: sees malware android explosive-growth

April 21, 2011
4:01
DoJ and FBI now issuing command to botnet malware
» ‎ Hack a Day

Looks like the FBI is starting to get pretty serious about fighting malware. Traditionally they have attacked the servers that activate and control botnets made up of infected computers. This time they’re going much further by taking control of and issuing commands to the botnets. In this instance it’s a nasty little bug called Coreflood, [...]
Tags: malware fbi control little-bug doj security hacks

April 20, 2011
18:38
Malware Analyser 3.0
» ‎ Packet Storm Security Recent Files

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

18:38
Malware Analyser 3.0
» ‎ Packet Storm Security Tools

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

18:38
Malware Analyser 3.0
» ‎ Packet Storm Security Misc. Files

Malware Analyser is freeware tool to perform static and dynamic analysis on malwares.
Tags: analyser freeware malware dynamic-analysis

April 19, 2011
18:58
Malheur Malware Analyzer 0.5.0
» ‎ Packet Storm Security Recent Files

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

18:58
Malheur Malware Analyzer 0.5.0
» ‎ Packet Storm Security Tools

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

18:58
Malheur Malware Analyzer 0.5.0
» ‎ Packet Storm Security Misc. Files

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It is designed to support the regular analysis of malicious software and the development of detection and defense measures. It allows for identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. It can be applied to recorded program behavior of various formats as long as monitored events are separated by delimiter symbols, e.g. as in reports generated by the popular malware sandboxes CWSandbox, Anubis, Norman Sandbox, and Joebox.
Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

April 13, 2011
13:39
[Paper] Malware Distribution via Widgetization of the Web
» ‎ SecDocs

Authors: Neil Daswani
Tags: malware
Event: Black Hat DC 2011
Abstract: The Web 2.0 transformation has in part involved many sites using third-party widgets. We present the "widgetized web graph" showing the structure of high traffic web sites from the standpoint of widgets, show how web-based malware and scareware is propagated via such widgets, and provide data on how a mass web-based malware attack can take place against the Quantcast 1000 web sites via widgets.
Tags: malware web paper neil-daswani web-graph mass-web

April 11, 2011
7:20
UK Police Arrest Three Men Over SpyEye Malware
» ‎ Packet Storm Security Headlines

UK Police Arrest Three Men Over SpyEye Malware
Tags: police three arrest uk-police-arrest malware three-men
April 05, 2011
19:20
Surge In Malware Marks Start Of Year
» ‎ Packet Storm Security Headlines

Surge In Malware Marks Start Of Year
Tags: marks malware surge
March 31, 2011
20:08
New Android Malware Targets App Pirates
» ‎ Packet Storm Security Headlines

New Android Malware Targets App Pirates
Tags: new malware android pirates
March 25, 2011
8:42
Spotify Splattered With Malware Tainted Ads
» ‎ Packet Storm Security Headlines

Spotify Splattered With Malware Tainted Ads
Tags: spotify splattered malware
March 19, 2011
7:12
Hacker Gets 9 Years For Hospital Malware
» ‎ Packet Storm Security Headlines

Hacker Gets 9 Years For Hospital Malware
Tags: hacker years gets malware
March 16, 2011
15:52
Microsoft Malware Removal Tool Takes Out Public Enemy No. 4
» ‎ Packet Storm Security Headlines

Microsoft Malware Removal Tool Takes Out Public Enemy No. 4
Tags: microsoft malware removal malware-removal-tool microsoft-malware-removal-tool microsoft-malware-removal

March 15, 2011
22:25
[Audio] Malware Freak Show 2: The Client-Side Boogaloo
» ‎ SecDocs

Authors: Jibran Ilyas Nicholas J. Percoco
Tags: malware cybercrime
Event: DEFCON 18

Tags: audio freak malware nicholas-j.-percoco
22:25
[Slides] Malware Freak Show 2: The Client-Side Boogaloo
» ‎ SecDocs

Authors: Jibran Ilyas Nicholas J. Percoco
Tags: malware cybercrime
Event: DEFCON 18

Tags: show freak malware nicholas-j.-percoco slides
22:25
[Video] Malware Freak Show 2: The Client-Side Boogaloo
» ‎ SecDocs

Authors: Jibran Ilyas Nicholas J. Percoco
Tags: malware cybercrime
Event: DEFCON 18

Tags: video freak malware nicholas-j.-percoco freak-show

March 10, 2011
6:40
Router Rooting Malware Pwns Linux Based Network Devices
» ‎ Packet Storm Security Headlines

Router Rooting Malware Pwns Linux Based Network Devices
Tags: router rooting malware linux
March 09, 2011
19:12
DDoS Malware Comes With Self Destruct Payload
» ‎ Packet Storm Security Headlines

DDoS Malware Comes With Self Destruct Payload
Tags: ddos self malware self-destruct

March 07, 2011
7:06
Google Removes ‘DroidDream’ Malware From Android Devices
» ‎ Darknet

Android must be getting popular! It’s always a test of a new platform or OS, when does it start getting serious malware targeting it? It seems like the time for Android is now, the news lately has been buzzing about the DroidDream malware that has been flooding the Android Market. Google pulled a number of [...]

Read the full post at darknet.org.uk

Tags: google malware android read darknet ExploitsVulnerabilities

March 04, 2011
7:32
Charlie Sheen Malware Is Cracked Out
» ‎ Packet Storm Security Headlines

Charlie Sheen Malware Is Cracked Out
Tags: charlie-sheen malware
7:25
Malware Infections And Spam Fall Off In February
» ‎ Packet Storm Security Headlines

Malware Infections And Spam Fall Off In February
Tags: infections spam malware

March 01, 2011
21:25
[Audio] Searching for Malware: A Review of Attackers' Use of Search Engines to Lure Victims
» ‎ SecDocs

Authors: Dave Maynor Paul Judge
Tags: malware
Event: DEFCON 18

Tags: audio searching malware paul-judge dave-maynor maynor attackers search-engines
21:25
[Slides] Searching for Malware: A Review of Attackers' Use of Search Engines to Lure Victims
» ‎ SecDocs

Authors: Dave Maynor Paul Judge
Tags: malware
Event: DEFCON 18

Tags: review searching malware paul-judge dave-maynor maynor attackers search-engines
21:25
[Video] Searching for Malware: A Review of Attackers' Use of Search Engines to Lure Victims
» ‎ SecDocs

Authors: Dave Maynor Paul Judge
Tags: malware
Event: DEFCON 18

Tags: video searching malware paul-judge dave-maynor maynor attackers search-engines
February 21, 2011
21:25
[Slides] Malware Migrating to Gaming Consoles: Embedded Devices, an AntiVirus-free Safe Hideout for Malware
» ‎ SecDocs

Authors: Dong-Joo Ha Ki-Chan Ahn
Tags: malware games malware analysis
Event: DEFCON 18

Tags: migrating gaming malware chan-ahn hideout ahn slides
21:25
[Video] Malware Migrating to Gaming Consoles: Embedded Devices, an AntiVirus-free Safe Hideout for Malware
» ‎ SecDocs

Authors: Dong-Joo Ha Ki-Chan Ahn
Tags: malware games malware analysis
Event: DEFCON 18

Tags: video migrating malware chan-ahn hideout ahn
21:25
[Audio] Malware Migrating to Gaming Consoles: Embedded Devices, an AntiVirus-free Safe Hideout for Malware
» ‎ SecDocs

Authors: Dong-Joo Ha Ki-Chan Ahn
Tags: malware games malware analysis
Event: DEFCON 18

Tags: audio migrating malware chan-ahn hideout ahn
February 18, 2011
21:25
[Video] 0box Analyzer: AfterDark Runtime Forensics for Automated Malware Analysis and Clustering
» ‎ SecDocs

Authors: Jeremy Chiu Wayne Huang
Tags: malware malware analysis
Event: DEFCON 18

Tags: video analysis malware wayne-huang jeremy-chiu afterdark forensics
21:25
[Audio] 0box Analyzer: AfterDark Runtime Forensics for Automated Malware Analysis and Clustering
» ‎ SecDocs

Authors: Jeremy Chiu Wayne Huang
Tags: malware malware analysis
Event: DEFCON 18

Tags: audio analysis malware wayne-huang jeremy-chiu forensics

February 09, 2011
23:59
Report: AV Users Still Get Infected With Malware
» ‎ Packet Storm Security Headlines

Report: AV Users Still Get Infected With Malware
Tags: infected report malware
February 08, 2011
16:16
Mobile Malware On The Rise, But Is It A Real Threat?
» ‎ Packet Storm Security Headlines

Mobile Malware On The Rise, But Is It A Real Threat?
Tags: mobile malware real the-rise

January 25, 2011
2:08
Digital Underground Offering Cheap Botnets For Hire
» ‎ Darknet

Perhaps even the cyber-criminals are effected by the recent recession – botnets for hire are hitting rock-bottom rates starting at just $2. We reported back in April 2010 about the Texas Man Who Pleaded Guilty To Bot Network For Hire. They are becoming more multi-talented as well rather than just offering bot networks for DDoS [...]

Read the full post at darknet.org.uk

Tags: digital bot hire read texas cyber-criminals botnets digital-underground malware

January 20, 2011
21:43
Mac Malware Made Moves In 2010
» ‎ Packet Storm Security Headlines

Mac Malware Made Moves In 2010
Tags: malware

January 19, 2011
23:45
Java Based Cross Platform Malware Trojan (Mac/Linux/Windows)
» ‎ Darknet

It’s pretty rare to read about malware on the Linux or Mac OSX platforms and even more rare to read about cross-platform malware which targets both AND Windows by using Java. A neat piece of coding indeed, it targets vulnerabilities in all 3 operating systems – the sad thing? The malware itself is vulnerable to [...]

Read the full post at darknet.org.uk

Tags: java malware linux read mac-osx mac neat-piece mac-linux linux-windows apple

January 05, 2011
8:20
Malware Growth Went Off The Scale In 2010
» ‎ Packet Storm Security Headlines

Malware Growth Went Off The Scale In 2010
Tags: scale malware growth

Skip to page: 1 2

jetlib.sec » Tags » malware

Feeds

388 items tagged "malware"

Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

Tags: malheur behavior malware norman-sandbox program-behavior malicious-software

Tags: analyser hook malware hook-tool tool-2 analysing

Tags: analyser hook malware hook-tool tool-2 analysing

Tags: analyser hook malware hook-tool tool-2 analysing

Tags: analyser hook malware hook-tool tool-2 analysing

Tags: point targets sale dexter-malware point-of-sale-systems point-of-sale malware

Tags: warning attack malware exploit

Tags: android malware scanner

Tags: analysis malware basics pe-file-format assembly-programming windows-pe

Tags: analysis malware basics pe-file-format assembly-programming windows-pe

Tags: mobile cyberheist pulled 30m malware

Tags: polymorphic malware the-rise

Tags: slurps malware rocket japanese-space-agency rocket-data

Tags: share smartcard malware

Tags: malware tracking botnets thorsten-holz slides

Tags: posing e-mail malware the-rise

Tags: jacksbot new malware

Tags: report kindsight malware mobile-adapters security-labs home-networks

Tags: report kindsight malware mobile-adapters security-labs home-networks

Tags: day malware advertisers

Tags: hijacks malware your death-threats email

Tags: analyser hook malware hook-tool tool-2 analysing

Tags: analyser hook malware hook-tool tool-2 analysing

Tags: analyser hook malware hook-tool tool-2 analysing

Tags: malware duqu command control-servers slides

Tags: google malware working scanner

Tags: distributor malware handed

Tags: malware web collection extreme-caution exploits execution

Tags: malware web collection extreme-caution exploits execution

Tags: malware web collection extreme-caution exploits execution

Tags: malware spyeye file predictable-behavior proof-of-concept simple-test

Tags: malware spyeye file predictable-behavior proof-of-concept simple-test

Tags: targeting malware discovered iran targeting-iran

Tags: malware nintendo Software chan-ahn nintendo-wii false-sense-of-security legit-software

Tags: inserted malware study pc-production

Tags: getting malware harder

Tags: malware talk reality trojans chaos-communication-camp internal-statistics idea-what-kind

Tags: lame chancers flog mac-malware malware

Tags: malware botnet mitigation norman carsten-willems washington d.c. norman-sandbox georg-wicherski chaos-communication-congress botnet-detection

Tags: malware botnet mitigation norman carsten-willems washington d.c. norman-sandbox georg-wicherski chaos-communication-congress botnet-detection

Tags: targeting malware blackberry corporate-customers

Tags: infects crisis malware virtual-machines

Tags: sms rockets malware trojan

Tags: zeus malware europe

Tags: malware detection stealth joanna-rutkowska chaos-communication-congress 23th

Tags: malware detection stealth joanna-rutkowska chaos-communication-congress 23th

Tags: malware detection stealth joanna-rutkowska chaos-communication-congress 23th

Tags: blackberry targeting found zeus-malware zeus malware

Tags: photo facebook fake photo-tag ruse malware

Tags: malware weeks undiscovered google

Tags: market malware android read china premium-sms china-mobile mobile-market malware

Tags: analyser hook malware hook-tool tool-2 analysing

Tags: analyser hook malware hook-tool tool-2 analysing

Tags: banking audio malware thorsten-holz chaos-communication-congress empirical-measurement measurement-results

Tags: malware apple security malware-removal-tool security-advisory flashback

Tags: malware advisory flashback apple-security malware-removal-tool security-advisory

Tags: malware advisory flashback apple-security malware-removal-tool security-advisory

Tags: malware android levels

Tags: strain malware ransom new new-malware locks

Tags: makers earns malware flashback

Tags: part malware engineering reverse-engineering whitepaper

Tags: malware card security compact-flash-card potential-security-vulnerability hp-procurve

Tags: malware card security compact-flash-card potential-security-vulnerability hp-procurve

Tags: malware card security compact-flash-card potential-security-vulnerability hp-procurve

Tags: research sophos malware mac-computers

Tags: malware video stuxnet bruce-dang peter-ferrie chaos-communication-congress technical-vulnerability mainstream-press

Tags: malware audio stuxnet bruce-dang peter-ferrie chaos-communication-congress technical-vulnerability mainstream-press

Tags: malware flashback removal removal-tool bugtraq

Tags: year trojan android read china google darknet japanese-market malware

Tags: infected malware flash hp-switches flash-card