Cloud Security Alliance News Clipping Site

Tag: malware detection

  • Hacker News: North Korean hackers create Flutter apps to bypass macOS security

    —

    by

    system automation
    in

    Source URL: https://www.bleepingcomputer.com/news/security/north-korean-hackers-create-flutter-apps-to-bypass-macos-security/ Source: Hacker News Title: North Korean hackers create Flutter apps to bypass macOS security Feedly Summary: Comments AI Summary and Description: Yes Summary: North Korean threat actors are exploiting macOS by creating trojanized applications, particularly targeting cryptocurrency themes, that bypass Apple’s security mechanisms. These apps, developed using the Flutter framework, present a…

  • Hacker News: The performance of hashing for similar function detection

    —

    by

    system automation
    in

    Source URL: https://edmcman.github.io/blog/2024-01-11–fuzzy-hashing-for-code-comparisons/ Source: Hacker News Title: The performance of hashing for similar function detection Feedly Summary: Comments AI Summary and Description: Yes Summary: The text delves deeply into malware reverse engineering and explores advanced hashing techniques like PIC hashing and fuzzy hashing. It highlights the significant challenges faced in identifying equivalent functions across different…

  • Cisco Talos Blog: Writing a BugSleep C2 server and detecting its traffic with Snort

    —

    by

    system automation
    in

    Source URL: https://blog.talosintelligence.com/writing-a-bugsleep-c2-server/ Source: Cisco Talos Blog Title: Writing a BugSleep C2 server and detecting its traffic with Snort Feedly Summary: This blog will demonstrate the practice and methodology of reversing BugSleep’s protocol, writing a functional C2 server, and detecting this traffic with Snort.  AI Summary and Description: Yes Summary: The text provides an in-depth…

  • The Register: Cicada ransomware may be a BlackCat/ALPHV rebrand and upgrade

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/09/04/cicada_ransomware_blackcat_links/ Source: The Register Title: Cicada ransomware may be a BlackCat/ALPHV rebrand and upgrade Feedly Summary: Researchers find many similarities, and nasty new customizations such as embedded compromised user credentials The Cicada3301 ransomware, which has claimed at least 20 victims since it was spotted in June, shares “striking similarities" with the notorious BlackCat…