||||The.Fischerman.CH

Finding and investigating new malware families or campaigns is a lot like pulling a loose thread from an article of clothing. Once you start tugging gently on the thread, everything starts to unravel. In this particular case we began by investigating a new malware family, which we are calling SquirtDanger based on a DLL, SquirtDanger.dll, used in the attacks. There is strong evidence to indicate that this malware family was created by a prolific Russian malware author that goes by the handle of ‘TheBottle’. By pulling on a few strings we were eventually led to TheBottle’s unraveling. In this post we will delve into how we unraveled TheBottle’s activities and his newest malware family

Source ->

— the.Fischerman.ch
(@FischermanCH)

 

Seit Jahren wissen IT-Experten um die Schwächen von Routern und anderer Netzwerktechnik. Warum warnen westliche Behörden ausgerechnet jetzt vor groß angelegten Hacks der Russen?

Source ->

— the.Fischerman.ch
(@FischermanCH)

 

Passwörter, PGP-Schlüssel, Krypto-Keys und VPN-Zugangsdaten – in zehntausenden von Android-Apps finden sich Geheimnisse der Entwickler, die eigentlich nicht öffentlich zugänglich sein sollten.

Source ->

— the.Fischerman.ch
(@FischermanCH)

 

While performing in-depth analysis of various malware samples, security researchers at Cyberbit found a new code injection technique, dubbed Early Bird, being used by at least three different sophisticated malware that helped attackers evade detection.

Source ->

— the.Fischerman.ch
(@FischermanCH)

 

A security researcher has disclosed details of an important vulnerability in Microsoft Outlook for which the company released an incomplete patch this month—almost 18 months after receiving the responsible disclosure report.

Source ->

— the.Fischerman.ch
(@FischermanCH)