Experimental News Clipping Site

Tag: malware detection

  • Unit 42: Now You See Me, Now You Don’t: Using LLMs to Obfuscate Malicious JavaScript

    —

    by

    system automation
    in

    Source URL: https://unit42.paloaltonetworks.com/?p=137970 Source: Unit 42 Title: Now You See Me, Now You Don’t: Using LLMs to Obfuscate Malicious JavaScript Feedly Summary: This article demonstrates how AI can be used to modify and help detect JavaScript malware. We boosted our detection rates 10% with retraining. The post Now You See Me, Now You Don’t: Using…

  • Hacker News: LLVM-Powered Devirtualization

    —

    by

    system automation
    in

    Source URL: https://blog.thalium.re/posts/llvm-powered-devirtualization/ Source: Hacker News Title: LLVM-Powered Devirtualization Feedly Summary: Comments AI Summary and Description: Yes Summary: The text elaborates on the techniques and methodologies for deobfuscating virtualized binaries, primarily utilizing dynamic taint analysis and LLVM optimization strategies. This study showcases new approaches to reverse engineering obfuscated binaries, which is critical in the context…

  • Hacker News: North Korean hackers create Flutter apps to bypass macOS security

    —

    by

    system automation
    in

    Source URL: https://www.bleepingcomputer.com/news/security/north-korean-hackers-create-flutter-apps-to-bypass-macos-security/ Source: Hacker News Title: North Korean hackers create Flutter apps to bypass macOS security Feedly Summary: Comments AI Summary and Description: Yes Summary: North Korean threat actors are exploiting macOS by creating trojanized applications, particularly targeting cryptocurrency themes, that bypass Apple’s security mechanisms. These apps, developed using the Flutter framework, present a…

  • Hacker News: The performance of hashing for similar function detection

    —

    by

    system automation
    in

    Source URL: https://edmcman.github.io/blog/2024-01-11–fuzzy-hashing-for-code-comparisons/ Source: Hacker News Title: The performance of hashing for similar function detection Feedly Summary: Comments AI Summary and Description: Yes Summary: The text delves deeply into malware reverse engineering and explores advanced hashing techniques like PIC hashing and fuzzy hashing. It highlights the significant challenges faced in identifying equivalent functions across different…

  • Cisco Talos Blog: Writing a BugSleep C2 server and detecting its traffic with Snort

    —

    by

    system automation
    in

    Source URL: https://blog.talosintelligence.com/writing-a-bugsleep-c2-server/ Source: Cisco Talos Blog Title: Writing a BugSleep C2 server and detecting its traffic with Snort Feedly Summary: This blog will demonstrate the practice and methodology of reversing BugSleep’s protocol, writing a functional C2 server, and detecting this traffic with Snort.  AI Summary and Description: Yes Summary: The text provides an in-depth…

  • The Register: Cicada ransomware may be a BlackCat/ALPHV rebrand and upgrade

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/09/04/cicada_ransomware_blackcat_links/ Source: The Register Title: Cicada ransomware may be a BlackCat/ALPHV rebrand and upgrade Feedly Summary: Researchers find many similarities, and nasty new customizations such as embedded compromised user credentials The Cicada3301 ransomware, which has claimed at least 20 victims since it was spotted in June, shares “striking similarities" with the notorious BlackCat…