In this meet, Monnappa K A delivered presentation on “Understanding Evasive Hollow Process Injection techniques” Demo1: Investigating Taidoor’s Evasive Hollow Process Injection Demo2: Investigating Kuluoz’s Evasive Hollow Process Injection. Demo3: Investigating Modified Kuluoz’s Evasive Hollow Process Injection Demo4: Investigating Kronos malware’s Evasive Hollow Process Injection
In this meet, Ashutosh Ahelleya delivered presentation on “Bit Flipping Attack on AES-CBC”
In between the waves of Petya Ransomware-wiper, another serious ransomware were spreading across, The “Karo Ransomware”. The initial vector being spam mails with a document file. The document file is password protected and this malware is Virtualization aware and refuses to run in sandboxes. Once infected Karo encrypts the files with the (.ipygh) extension and it […]
This is an announcement for the upcoming Cysinfo cyber security community meetup on 29th July 2017 in Bangalore, India. This meet is completely free and doesn’t require any registration or any other formalities to attend. The meet will start at 9:30 AM IST. We would like to thank Amrita University and Amrita TBI for supporting and […]
SUMMARY When it comes to Macro Malware, several people try to finish it off with two workarounds, Disable Macro (GPO) and user awareness. That said what if a malicious document doesn’t use Macro codes to do its malicious tasks? What if a document is exploiting a vulnerability to do its malicious activities? That said, Let […]
In my previous blog posts I posted details of cyber attacks targeting Indian Ministry of External Affairs and Indian Navy’s Warship and Submarine Manufacturer. This blog post describes another attack campaign where attackers impersonated identity of Indian think tank IDSA (Institute for Defence Studies and Analyses) and sent out spear-phishing emails to target officials of […]
Before I begin I would like to quote current Attorney General of India “The invasion of privacy is of no consequence because privacy is not a fundamental right and has no meaning under Article 21. The right to privacy is not a guaranteed under the constitution, because privacy is not a fundamental right.” Article 21 […]
We have always been curious to know about what goes on inside the state sponsored security agencies like NSA (National Security Agency). Since the agency is known to operate on multiple spying operations in the past for tracking criminals and terrorists, it might sometimes need the use of zero day exploits to get into targeted […]
Hello there! before we begin our journey, spare some time to update the below spyware signature (No detections anywhere) in all your controls, which digests IOCs: MD5 – 68AB498574C0BEAE225A04D04A2571A1 (new variant of spyware) NB: The day was sunny and was analyzing a targeted spam mail and its attached macro malware – normal routine 🙂 But this […]
Text: Audience Level: Beginner to Medium. Few months back we released our new tool APITacker. The idea behind the tool is more mature than the tool itself. Using APITracker we can hook APIs on large scale from DLLs to track the execution of the sample. APITracker is based on pydbg python debugger. Before we move […]