virustotal – Computer Security Articles

Accidental VirusTotal upload is a valuable reminder to double check what you share

July 20, 2023 admin Business, data, document, download, file, files, google, intelligence, share, sharing, social media, upload, virustotal

Categories: Business

Tags: upload

Tags: download

Tags: share

Tags: data

Tags: intelligence

Tags: google

Tags: virustotal

Tags: social media

Tags: sharing

Tags: document

Tags: file

Tags: files

We take a look at reports of a document being accidentally shared to the VirusTotal service and potentially exposing names and email addresses in the security and intelligence community.

MalwareBytes Security

Fake Proof-of-Concepts used to lure security professionals

October 27, 2022 admin abuseipdb, Exploits and vulnerabilities, GitHub, leiden, news, poc, pocs, virustotal

Categories: Exploits and vulnerabilities

Categories: News

Tags: PoC

Tags: PoCs

Tags: Leiden

Tags: GitHub

Tags: VirusTotal

Tags: AbuseIPDB

Researchers from Leiden University analyzed many thousands of Proof-of-Concepts and found that 10 percent of those they found on GitHub are malicious

MalwareBytes Security

A week in security (April 18 – 24)

April 25, 2022 admin a week in security, elon musk, Lazarus, Oracle, Pegasus, scrape public data, twitter philanthropists, ukraine donation scammers, virustotal

Credit to Author: Malwarebytes Labs| Date: Mon, 25 Apr 2022 10:44:06 +0000

The most important and interesting stories in security from the last seven days

The post A week in security (April 18 – 24) appeared first on Malwarebytes Labs.

MalwareBytes Security

Why you shouldn’t automate your VirusTotal uploads

April 18, 2022 admin 101, attachments, bsi, tlp, virustotal

Credit to Author: Pieter Arntz| Date: Mon, 18 Apr 2022 15:33:35 +0000

Security teams use VirusTotal as a second opinion scanner, but it’s not advisable to upload documents to VirusTotal as that may result in a breach of confidence and exposure of confidential data.

The post Why you shouldn’t automate your VirusTotal uploads appeared first on Malwarebytes Labs.

MalwareBytes Security

Caution: Misuse of security tools can turn against you

July 11, 2019 admin automation, Carbon Black, data leaks, EDR platforms, exes, infosec, opsec, plugins, remediation and prevention, Researcher's corner, rules-based segmentation, security solutions, Security Tools, virustotal, VT

Credit to Author: Vasilios Hioureas| Date: Thu, 11 Jul 2019 17:34:57 +0000

If not implemented correctly, the very security tools we use to keep our information private may actually cause data leaks themselves. We outline a few cases and provide suggestions for researchers and security admins.

Categories:

Researcher’s corner

Tags: automation Carbon Black data leaks EDR platforms exes infosec opsec plugins remediation and prevention rules-based segmentation security solutions security tools virustotal VT

MalwareBytes Security

Buggy implementation of CVE-2018-8373 vulnerability used to deliver Quasar RAT

September 26, 2018 admin anti exploit, CVE-2018-8174, CVE-2018-8373, exploit, Exploits, Indicators of compromise, IOC, IOCs, Pastebin, patch, quasar, Rat, remote administration tool, Threat analysis, virustotal, vulnerabilities, Vulnerability

Credit to Author: Jérôme Segura| Date: Wed, 26 Sep 2018 17:13:26 +0000

A threat actor implements a newer vulnerability exploited in Internet Explorer to serve up the Quasar RAT and diversify the portfolio of attacks.

Categories:

Tags: anti exploit CVE-2018-8174 CVE-2018-8373 exploit Indicators of compromise IOC IOCs pastebin patch Quasar rat remote administration tool virustotal vulnerabilities vulnerability

Independent Krebs

Chronicle: A Meteor Aimed At Planet Threat Intel?

January 24, 2018 admin A Little Sunshine, Alphabet, Astro Teller, Chronicle, google, Google X, no-distribute scanner, Security Tools, Stephen Gillett, virustotal

Credit to Author: BrianKrebs| Date: Wed, 24 Jan 2018 22:56:52 +0000

Alphabet Inc., the parent company of Google, said today it is in the process of rolling out a new service designed to help companies more quickly make sense of and act on the mountains of threat data produced each day by cybersecurity tools. Countless organizations rely on a hodgepodge of security software, hardware and services to find and detect cybersecurity intrusions before an incursion by malicious software or hackers has the chance to metastasize into a full-blown data breach.

Independent Krebs

Carbon Emissions: Oversharing Bug Puts Security Vendor Back in Spotlight

August 18, 2017 admin Amazon Macie, Carbon Black, DirectDefense, Mike Viscuso, Other, Spotify, virustotal

Credit to Author: BrianKrebs| Date: Fri, 18 Aug 2017 17:38:57 +0000

Last week, security firm DirectDefense came under fire for over-hyping claims that Cb Response, a cybersecurity product sold by competitor Carbon Black, was leaking proprietary from customers who use it. Carbon Black responded that the bug identified by its competitor was a feature, and that customers were amply cautioned in advance about the potential privacy risks of using the feature. Now Carbon Black is warning that an internal review has revealed a wholly separate bug in Cb Response that could in fact result in certain customers unintentionally sharing sensitive files.

← Previous