Cloud Security Alliance News Clipping Site

Tag: stealthy

  • Hacker News: Windows Process Injection

    —

    by

    system automation
    in

    Source URL: https://www.outflank.nl/blog/2024/10/15/introducing-early-cascade-injection-from-windows-process-creation-to-stealthy-injection/ Source: Hacker News Title: Windows Process Injection Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text introduces a novel process injection technique dubbed Early Cascade Injection, which enhances existing methods by executing more stealthily against Endpoint Detection and Response (EDR) systems. The author provides a detailed technical analysis of Windows…

  • The Register: Pixel perfect Ghostpulse malware loader hides inside PNG image files

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/10/22/ghostpulse_malware_loader_png/ Source: The Register Title: Pixel perfect Ghostpulse malware loader hides inside PNG image files Feedly Summary: Miscreants combine it with an equally tricky piece of social engineering The Ghostpulse malware strain now retrieves its main payload via a PNG image file’s pixels. This development, security experts say, is “one of the most…

  • Schneier on Security: Perfectl Malware

    —

    by

    system automation
    in

    Source URL: https://www.schneier.com/blog/archives/2024/10/perfectl-malware.html Source: Schneier on Security Title: Perfectl Malware Feedly Summary: Perfectl in an impressive piece of malware: The malware has been circulating since at least 2021. It gets installed by exploiting more than 20,000 common misconfigurations, a capability that may make millions of machines connected to the Internet potential targets, researchers from Aqua…

  • Hacker News: Knockknock: Simple, secure, and stealthy port knocking implementation

    —

    by

    system automation
    in

    Source URL: https://github.com/moxie0/knockknock Source: Hacker News Title: Knockknock: Simple, secure, and stealthy port knocking implementation Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses an innovative and secure implementation of “port knocking” using a minimalist application called “knockknock.” It highlights the challenges and pitfalls of traditional port knocking systems, emphasizes the need…