Last week on Malwarebytes Labs, we offered readers tips for safe online shopping now that cybercriminals are ramping up Internet-based attacks, showed the impact that GDPR has around the world, and helped users understand how social media platforms mine their personal data. We also hosted our bi-weekly podcast, Lock and […]
Security
808 posts
Smart speakers have proven to be one of the most versatile gadgets of the era, the high-tech AI companions can do everything from playing music to ordering a meal with just the sound of your voice. They come with virtual assistants ready to answer all your queries, other features include […]
As per reports, a telecommunication provider that is owned by Russia rerouted traffic which was intended for the most imminent Content Delivery Networks (CDNs) and cloud host providers of the globe. The entire re-direction kept on for around an hour during which it affected over 8,500 traffic routes of the […]
Russian Senator Alexey Pushkov noted that the Minister was actually attacked by ordinary Swedish Internet users who were not satisfied with the position of the politician. Pushkov added that similar cases of “Russian interference” were actively expressed by Hillary Clinton in the year of the American presidential election in 2016. […]
This is a fake DNS server that allows you to stealthily extract files from a victim machine through DNS requests.Below are a couple of different images showing examples of multiple file transfer and single verbose file transfer: Support for multiple files Gzip compression supported Now supports the customisation of subdomains […]
The Open Source Security Events Metadata (OSSEM) is a community-led project that focuses primarily on the documentation and standardization of security event logs from diverse data sources and operating systems. Security events are documented in a dictionary format and can be used as a reference for projects like the ThreatHunter-Playbook […]
The United States Congress recently passed the “Coronavirus Aid, Relief, and Economic Security Act” (the “CARES Act”). This legislation is intended to help American businesses during the COVID-19 outbreak. The CARES Act allocated approximately $349 billion for assistance programs for small businesses. An overview of these programs is available here. […]
On Feb 11, 2020, Microsoft released security updates to address a vulnerability in Microsoft Exchange that would allow an attacker to turn any stolen Exchange user account into a complete system compromise. In many implementations, this could be used to completely compromise the entire Exchange environment (including all email) and […]
At Rapid7, we have made it our top priority to uncover unmet customer needs and create value in new product development that addresses these needs. This post will give you a glimpse into the research that was conducted to pinpoint under-served and unmet customer needs in the vulnerability risk management […]
Amid this Covid-19 lockdown, the use of video conferencing software has seen a rapid rise- be it work-related, teaching or just socializing. Our use of video chats has increased and with it, the security concerns have risen diligently. One such software “Zoom”, which is quite popular for video conferencing has […]
If you read my previous blogpost, “Hunting APTs with YARA” then you probably know about the webinar we’ve done on March 31, 2020, showcasing some of our experience in developing and using YARA rules for malware hunting. In case you’ve missed the webinar or if you attended and want to […]
Use angr inside GDB. Create an angr state from the current debugger state. Install pip install angrgdbecho "python import angrgdb.commands" >> ~/.gdbinit Usageangrgdb implements the angrdbg API in GDB.You can use it in scripts like this: from angrgdb import *gdb.execute("b *0x004005f9")gdb.execute("r aaaaaaaa")sm = StateManager()sm.sim(sm["rax"], 100)m = sm.simulation_manager()m.explore(find=0x00400607, avoid=0x00400613)sm.to_dbg(m.found[0]) #write input […]
This is a second release of SSHPry tool, with multiple features added. Control of target’s TTY Built-In Keylogger Console-Level phishing Record & Replay previous sessions Demo Blogpost: http://www.korznikov.com/2017/09/sshpry-v2-spy-control-ssh-connected.htmlTwitter: @nopernik Howto./sshpry2.py Files:sshpry2.py – the toolEverything else parts of code used in the tool (does not depends on them) Download SSHPry2.0 Original […]
Participants of the Zoom conference on the digital future of the country said that the transition to remote work and mass online training became forced testing of Russian Internet services and platforms, most of them failed the tests. The meeting was attended by leading representatives of the Internet industry and […]
Due to the COVID-19 pandemic, people across the globe to stay at home. The quarantine has increased online shopping figures. Even though a majority of the people are shopping online for everything, from food to groceries to daily essentials, the web skimming attacks didn’t increase and are supposedly expected not […]