obfuscation – Computer Security Articles

The Hidden Bee cryptominer has a complex and multi-layered internal structure that is unusual among cybercrime toolkits. That’s why we’re dedicating a series of posts to exploring its elements and updates made during one year of its evolution.

Categories:

Threat analysis

Tags: cryptominers custom code exploit kits exploits hidden bee infection chain infection vector malware modules miner miners obfuscation payloads Underminer Underminer EK

QuickHeal Security

The evolution of a 4-year-old-threat Emotet: From an infamous Trojan to a complex threat distributer

July 25, 2018 admin banking malware, email, emotet, malspam, malware, obfuscation, phishing, phishing email, Security, spam

Credit to Author: Aniruddha Dolas| Date: Wed, 25 Jul 2018 13:40:33 +0000

Emotet malware campaign has been existing for a long time. It comes frequently in intervals with different techniques and variants to deliver malware on a victim. Attackers are smart and they use complex techniques to avoid detection. At the start of 2017, we had seen the emotet campaign spreading through…

QuickHeal Security

An emerging trend of DDE based Office malware – an analysis by Quick Heal Security Labs

December 6, 2017 admin DDE, exploit, malware, MS Office, obfuscation, RTF, Vulnerability

Credit to Author: Aniruddha Dolas| Date: Wed, 06 Dec 2017 09:27:30 +0000

For the past few years, we have been seeing macro-based attacks through Object Linking Embedding (OLE)/Microsoft Office files. But, presently, attackers are using a different technique to spread malware through Office files – using a new attack vector called ‘Dynamic Data Exchange (DDE)’. DDE is an authorized Microsoft Office feature that provides several methods for transferring data between applications. Once the communication protocol is established, it doesn’t require user interactions…

Microsoft Security

Combating a spate of Java malware with machine learning in real-time

April 20, 2017 admin Antimalware research for IT pros and enthusiasts, automation, cloud protection, Creators Update, Java, Java malware, machine learning, obfuscation, Social engineering, spam, Threat Intelligence, Windows 10, Windows 10 Creators Update, Windows Defender Antivirus

Credit to Author: msft-mmpc| Date: Thu, 20 Apr 2017 13:02:00 +0000

In recent weeks, we have seen a surge in emails carrying fresh malicious Java (.jar) malware that use new techniques to evade antivirus protection. But with our research team’s automated expert systems and machine learning models, Windows 10 PCs get real-time protection against these latest threats. Attackers are constantly changing their methods and tools. We…