Tag: evasion
-
Hacker News: Malware found on NPM infecting local package with reverse shell
Source URL: https://www.reversinglabs.com/blog/malicious-npm-patch-delivers-reverse-shell Source: Hacker News Title: Malware found on NPM infecting local package with reverse shell Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the emergence of sophisticated malware on the npm package repository, specifically through malicious packages like ethers-provider2 and ethers-providerz, which exhibit advanced evasive techniques to compromise legitimate…
-
Microsoft Security Blog: StilachiRAT analysis: From system reconnaissance to cryptocurrency theft
Source URL: https://www.microsoft.com/en-us/security/blog/2025/03/17/stilachirat-analysis-from-system-reconnaissance-to-cryptocurrency-theft/ Source: Microsoft Security Blog Title: StilachiRAT analysis: From system reconnaissance to cryptocurrency theft Feedly Summary: Microsoft Incident Response uncovered a novel remote access trojan (RAT) named StilachiRAT, which demonstrates sophisticated techniques to evade detection, persist in the target environment, and exfiltrate sensitive data. This blog primarily focuses on analysis of the WWStartupCtrl64.dll…
-
Cisco Talos Blog: Abusing with style: Leveraging cascading style sheets for evasion and tracking
Source URL: https://blog.talosintelligence.com/css-abuse-for-evasion-and-tracking/ Source: Cisco Talos Blog Title: Abusing with style: Leveraging cascading style sheets for evasion and tracking Feedly Summary: Cascading Style Sheets (CSS) are ever present in modern day web browsing, however its far from their own use. This blog will detail the ways adversaries use CSS in email campaigns for evasion and…
-
The Register: MINJA sneak attack poisons AI models for other chatbot users
Source URL: https://www.theregister.com/2025/03/11/minja_attack_poisons_ai_model_memory/ Source: The Register Title: MINJA sneak attack poisons AI models for other chatbot users Feedly Summary: Nothing like an OpenAI-powered agent leaking data or getting confused over what someone else whispered to it AI models with memory aim to enhance user interactions by recalling past engagements. However, this feature opens the door…
-
Slashdot: Microsoft Admits GitHub Hosted Malware That Infected Almost a Million Devices
Source URL: https://it.slashdot.org/story/25/03/10/1652235/microsoft-admits-github-hosted-malware-that-infected-almost-a-million-devices?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Microsoft Admits GitHub Hosted Malware That Infected Almost a Million Devices Feedly Summary: AI Summary and Description: Yes Summary: Microsoft has identified a malvertising campaign that exposed nearly a million devices to malware, linking infected users to malicious websites through redirectors from pirate video streaming sites. This highlights the…