Browsing: Malware

banner(“STEP 6 — IOC hunting in the deobfuscated strings”) PATTERNS = [ (“URL”, re.compile(r”https?://[^\s\”<>]+”)), (“IP”, re.compile(r”\b(?:\d{1,3}\.){3}\d{1,3}\b”)), (“PE/script”, re.compile(r”[A-Za-z0-9_]+\.(?:exe|dll|sys|ps1|bat)\b”, re.I)), (“Win32 API”, re.compile(r”\b(?:Reg(?:Open|Set|Create|Delete)Key(?:Ex)?A?|VirtualAlloc(?:Ex)?|CreateRemoteThread|WinExec|LoadLibraryA?|GetProcAddress|InternetOpenA?)\b”)), (“Registry”, re.compile(r”SOFTWARE\\\\?[A-Za-z0-9_\\\\]+”, re.I)), (“Base64-like”,…

Regardless of whether it’s for an article or for my own use, I’m a sucker for free software. I’m also rather fond of keeping my PC…

Chinese state-backed group Silver Dragon targets governments Attackers abuse Google Cloud and Windows services for stealthCustom backdoor GearDoor enables covert data exfiltrationChinese state-sponsored threat actors have…

PromptSpy malware uses Gemini to automate its persistenceThe malware blocks removal through an AI-guided interface controlGemini interprets screen data and returns actionable gesturesSecurity experts have revealed…

Mandiant reports UNC1069 using compromised Telegram, fake Zoom calls, and deepfake videos Victims tricked into installing malware suite including WAVESHAPER, HYPERCALL, and SUGARLOADERNorth Korean actors target…

An SQL injection flaw in QSM plugin versions 10.3.1 and below was found Vulnerability allows logged-in users (Subscriber or higher) to extract sensitive database dataWordPress admins…

What you need to knowMeta Quest v85 is now available to public test channel (PTC) users, including a new malware scanning feature, privacy indicator, voice control…

Russian hackers sell Chrome extension service that bypasses Google Store moderationMalicious add-on spoofs legitimate sites with full-screen iframes to steal credentialsVaronis advises strict enterprise allowlisting and…

Researchers on Friday said that Poland’s electric grid was targeted by wiper malware, likely unleashed by Russia state hackers, in an attempt to disrupt electricity delivery…

Check Point Research discovers an advanced Linux malware framework with 30+ pluginsVoidLink targets cloud environments, harvesting credentials and adapting to AWS, Azure, GCP, and moreNo active…