Aqua Security

DECEMBER 2, 2020

Our cyber research team detected a new type of attack that executes and runs malware straight from memory in containers, thus evading common defenses and static scanning. We found four container images in Docker Hub designed to execute fileless malware attacks.

Malware 103

Malware Research Resources 103

Aqua Security

APRIL 3, 2020

Container Vulnerability Cloud Native Security Malware AttacksLately we’ve been witnessing a rise in the number of attacks that target container environments. We’ve been tracking an organized attack campaign that targets misconfigured open Docker Daemon API ports.

Malware 114

Malware Sustainability Infrastructure Resources 114

Aqua Security

AUGUST 17, 2020

Now, Tracee is much more than just a system call tracer , it’s a powerful tool that can be used to perform forensic investigations and dynamic analysis of binaries – both are incredibly useful when looking for hidden malware.

Malware 96

Malware Tools System Open Source 96

CTOvision

DECEMBER 30, 2020

A new strand of malware uses Word files with macros to download a PowerShell script from GitHub. This PowerShell script further downloads a legitimate image file from image hosting service Imgur […]. News GitHub

Malware 96

Malware 96

CTOvision

JANUARY 25, 2021

Cybersecurity firm Symantec has uncovered an additional piece of malware used in the SolarWinds attacks, becoming the fourth piece of malware associated with the wide-ranging compromise of the popular IT […]. News SolarWinds Symantec Symantec Endpoint Protection

Malware 77

Malware 77

The Parallax

JANUARY 30, 2018

During a month that’s seen Android malware new and old plague the world’s most popular mobile operating system, Google says its Play Store is becoming more civilized and less like the Wild West. You have a lower probability of being infected by malware from Play than being hit by lightning,” Ahn says. A Google representative says the company detects “most” malware successfully uploaded to Google Play “within a day.” Ahn adds that Android malware is becoming more advanced.

Malware 156

Malware Open Source Mobile Operating System 156

DataRobot

JULY 20, 2021

Cyber and malware analysts have a critical role in detecting and mitigating cyberattacks. In this post, we show you how to build a malware detection model using the largest known dataset, SOREL-20M (Sophos/ReversingLabs-20 Million). Malware Use Case. SoReL-20M Malware Data.

Malware 52

Malware Training Machine Learning Analysis 52

CTOvision

MAY 1, 2019

Grimes explain 9 types of malware and how they can affect you on CSO Online : People tend to play fast and loose with security terminology. However, it’s important to get your malware classifications straight because knowing how various types of malware spread is vital to containing and removing them. This concise malware […]. Read Roger A.

Malware 90

Malware How To CTO 90

Symantec

APRIL 28, 2019

SGX-based malware may not be as troublesome as believed. We'll explain why that is and how Symantec is ready to deal with such malware if they were to appear

Malware 81

Malware 81

CTOvision

JULY 29, 2014

Three Questions on Automated Malware Removal with Bob Gourley, Cognitio Corp and CTOVision. While there’s still an emphasis – and related spending – on malware detection, most incident response teams are actually overwhelmed by vast number of security alerts they receive. Effective malware detection is important, but only paired with response and removal can companies effectively prevent the malware that will enter the system from doing damage. By Bob Gourley.

Malware 93

Malware Network Company Policies 93

CTOvision

AUGUST 21, 2017

In hindsight, the blog post should have been titled “Are you ready for state-sponsored zombie malware attacks?” Zombie malware combines the most deadly aspects of malware and zombie computers into one horrible mess. Typically malware gets […]. Artificial Intelligence CTO Cyber Security Cyber Threats Internet of Things News Robots Cybersecurity Malware

Malware 77

Malware Artificial Intelligence Internet CTO 77

CTOvision

NOVEMBER 14, 2014

The video below explores DDP Protected Workspace and uniquely addresses healthcare regulations related to malware prevention. The evolution of malware has gone from low sophistication, such as script kiddies, to nation states (tier 1), who are more skilled and who specifically target individuals, or industries with data they intend to infiltrate. The malware is from external agents. Malware is all new, and we need to focus on containment and isolation.

Malware 98

Malware Healthcare Azure Data 98

TechBeacon

AUGUST 27, 2020

Phones branded “ Tecno ” —made by Shenzhen Transsion Holdings—appear to be preinstalled with malware. Smartphone users in emerging markets are being ripped off by suspiciously cheap handsets. Security, Information Security, Security Blogwatch, Privacy

Malware 105

Malware Mobile Marketing 105

CTOvision

JUNE 24, 2020

Over two-thirds of malware detected in the first three months of the year was hidden in HTTPS encrypted tunnels in a bid to evade traditional AV, according to Watchguard. The security […].

Malware 73

Malware 73

CTOvision

JANUARY 11, 2021

Cobalt Strike and Metasploit, two penetration testing toolkits usually employed by security researchers, have been used to host more than a quarter of all the malware command and control (C&C) […].

Malware 101

Malware Research Testing 101

CTOvision

JULY 10, 2019

Mobile malware dubbed Agent Smith has infected about 25 million devices, mainly in India and other Asian countries, but other countries have also been affected, including the UK and US, according to security researchers at Check Point Software Technologies. Disguised as a Google-related application, the malware exploits known Android vulnerabilities and automatically replaces installed apps […].

Malware 86

Malware Mobile Research Applications 86

TechBeacon

MARCH 19, 2020

From misinformation spread by your Facebook friends, through malware distribution, to the DDoS’ing of health agencies. The novel coronavirus is affecting the world of infosec. Security, Information Security, Security Blogwatch

Malware 80

Malware 80

Darktrace

APRIL 8, 2021

Cyber AI discovered an extensive crypto-mining campaign in cardboard boxes in a disused warehouse. This blog discusses the rise in cryptocurrency farms and what this signals for the international cyber-threat landscape

Malware 104

Malware 104

Darktrace

JUNE 30, 2020

With cyber-attacks on the IoT devices becoming increasingly prevalent, this blog post details how Darktrace’s AI identified the Mirai malware in an Internet-connected CCTV camera, breaking down each stage of the attack life cycle

Malware 54

Malware IoT Internet 54

Aqua Security

NOVEMBER 30, 2020

With an ever-evolving threat landscape, bad actors increasingly target container infrastructure, installing sophisticated malware into images that changes its behavior to evade detection.

Malware 60

Malware Infrastructure Performance Analysis 60

CTOvision

DECEMBER 2, 2019

Microsoft security engineers detailed today a new malware strain that has been infecting Windows computers since October 2018 to hijack their resources to mine cryptocurrency and generate revenue for the attackers. Named Dexphot, this malware reached its peak in mid-June this year, when its botnet reached almost 80,000 infected computers.

Malware 69

Malware Windows Engineering Resources 69

Darktrace

MARCH 15, 2021

Internet-facing RDP servers are an increasingly common vector of compromise. This blog explains how one RDP infection nearly led to the creation of a botnet, had Darktrace AI not alerted the security team as soon as the attack began

Malware 69

Malware Internet 69

CTOvision

MARCH 18, 2021

It was only a matter of time before cybercriminals turned their attention to one of the most common activities on the internet— a Google search. The latest trick is using […]. News Balbix Balbix Inc

Malware 105

Malware Internet 105

CTOvision

JUNE 21, 2014

The video at this link and embedded below provides an overview of conclusions from CTOvision research into ways to automate the removal of cyber threats (including malware) from your enterprise. Analysis Big Data Cloud Computing CTO Cyber Security DoD and IC Strategy The Future Trends Video Automation Chief information security officer CISO Computer security Malware By Bob Gourley.

Malware 102

Malware Video Research Enterprise 102

Palo Alto Networks

JUNE 7, 2021

The Unit 42 cybersecurity consulting group published research on the first known malware targeting Windows containers, which was discovered by Unit 42 researcher Daniel Prizmant and named Siloscape.

Malware 52

Malware Windows Open Source Linux 52

CTOvision

FEBRUARY 27, 2019

Sucuri researchers discovered that the campaign sent out malicious emails masquerading as a confirmation for a recent transaction. Digital attackers deployed this disguise in the hopes that employees at the targeted bank would click on a link to a malicious PHP file out of alarm. That file was responsible for loading a fake 404 error […]. Cyber Security News

Malware 106

Malware PHP Banking Research 106

CTOvision

APRIL 23, 2019

HP on Tuesday announced a bevy of PC updates and new features, as well as the formal release of HP Sure Sense, the company’s new software that uses AI to prevent and block malware in near-real-time, including ransomware and previously unknown malware.

Malware 87

Malware Marketing Software Company 87

Aqua Security

JULY 8, 2019

In previous crypto-mining attacks, we observed hackers investing little to no effort in hiding their malicious activities. They just ran the malicious container with all of its scripts and configuration files in clear text. This made the analysis of their malicious intent fairly easy. Container Security Image Vulnerability Scanning

Malware 66

Malware Analysis 66

CTOvision

NOVEMBER 21, 2016

Malware exists even there - and it spreads fast. And like any system with a physical backend, the cloud can easily be subject to a wide range of vulnerabilities - including malware. But malware on the cloud is a very real, and very present threat. The problem is that the malware components aren’t identifiable through traditional scanning simply because they aren’t assembled as malware until the moment of attack.Some exploits appear to be benign.”.

Malware 102

Malware Cloud Study Research 102

TechBeacon

JANUARY 21, 2021

An AppleScript feature designed to compress scripts into pre-compiled form has allowed bad actors to evade security researchers for years. This cryptominer Trojan spread unchecked for some five years. Security, Information Security, Security Blogwatch

Malware 83

Malware Research 83

SecureWorks

OCTOBER 20, 2019

5 Ways Advanced Malware Evades the Sandbox Five Techniques You Can Do To Prepare for Evasive Advanced Malware Learn the five ways advanced malware evades detection and recommended techniques you can do to prepare for them. Fundamentals

Malware 46

Malware 46

CTOvision

NOVEMBER 23, 2020

A new variant of a skimmer has revealed the increasingly muddy waters associated with tracking groups involved in Magecart-style attacks. On Wednesday, researchers from RiskIQ described how a new Grelos […]. News RiskIQ

Malware 96

Malware Groups Infrastructure Research 96

CTOvision

JANUARY 23, 2019

Trojan malware attacks against business targets have rocketed in the last year, as cybercriminals alter their tactics away from short-term gain and in-your-face ransomware attacks towards more subtle, long-term campaigns with the aim of stealing information including banking information, personal data, and even intellectual property.

Malware 94

Malware Banking Report Data 94

Netskope

JULY 18, 2018

The complexity of different types of malware continues to grow and zero-day malware is often missed by traditional security solutions. Netskope customers have deployed our unified, cloud-native platform to enforce policies across SaaS, IaaS, and the web to block and quarantine zero-day malware in the cloud as well as other critical use cases. Here’s use case #19: Block and quarantine zero-day malware in the cloud. Support quarantine workflows that are malware-centric.

Malware 43

Malware Cloud Policies Analysis 43

AlienVault

JULY 9, 2019

So, what is malware analysis and why should I care? With the commercialization of cybercrime, malware variations continue to increase at an alarming rate, and this is putting many a defender on their back foot. Malware analysis — the basis for understanding the inner workings and intentions of malicious programs — has grown into a complex mix of technologies in data science and human interpretation.

Malware 40

Malware Analysis Tools Big Data 40

AlienVault

JULY 9, 2019

So, what is malware analysis and why should I care? With the commercialization of cybercrime, malware variations continue to increase at an alarming rate, and this is putting many a defender on their back foot. Malware analysis — the basis for understanding the inner workings and intentions of malicious programs — has grown into a complex mix of technologies in data science and human interpretation.

Malware 40

Malware Analysis Tools Big Data 40

InfoQ Articles

DECEMBER 7, 2020

The book Cybersecurity Threats, Malware Trends and Strategies by Tim Rains provides a overview of the threat landscape over a twenty year period. It provides insights and solutions that can be used to develop an effective cybersecurity strategy and improve vulnerability management.

Malware 84

Malware Trends Strategy Machine Learning 84

Lacework

AUGUST 26, 2019

The post Cryptomining Malware Using NSA Hacking Code is Spreading Rapidly appeared first on Lacework. Blog bitcoin cloud threats malwareThe combination of an anonymous currency and leaked government security exploits have led to a rising new threat for system administrators. While cybercriminals have long featured an assortment of ideologically driven activists or rising stars hoping to make a name for themselves with their peers, the vast majority of them are motivated by money.

Malware 46

Malware Systems Administration Government System 46

taos

OCTOBER 14, 2019

First Published: April 4, 2017, By Mark McCullough?—?Technical Technical Consultant Former Mozilla developer, Robert O’Callahan recently joined the growing chorus of those openly stating that anti-virus products cause more security harm than they prevent. He’s right, but that’s not the only security product that should have the harsh glare of security shined on it. It’s time for information security to eat its own dog food.

Malware 40

Malware Tools Network Resources 40

Lacework

JULY 3, 2019

This malware sample may unlock your variable naming writer’s block. The post Cryptojacking Malware Gets Creative with Variable Names appeared first on Lacework. Have you ever tried using your favorite foods? We hadn’t either until we came across this one. This Bash script was seen following the Confluence exploits we recently blogged about. The unique variable naming isn’t the only thing that caught our eye. The script uses [.]. Read More.

Malware 53

Malware 53