Skip to main content

Malware Ninja

Search This Blog

Unpatched Fortinet VPN devices welcome CRing Ransomware

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

cybersecurity malware ransomware

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

A passionate Threat Researcher and a Cybersecurity enthusiast.

Comments

Post a Comment

Popular Posts

Basic Security Measures You Should Follow

The world wide web (WWW) is an open playground for people all over the globe. And, if you think there are only good people out there providing you with free music, videos, images, quotes, and what not? then definitely you are WRONG! You must be prepared for the worst and the worst, since there are many crooks waiting to break into your life, by exploiting your online presence. If you are a regular (even if not) computer or any electronic device user you should take into consideration following basic security measures to ensure your safety in terms of Cyber Crime and not get fooled into something very nasty. You are a Target If you think "No one is gonna target me", then either you are an Alien or you are somewhere outside the Milky Way Galaxy. Always, consider yourself a target to be exploited, THE VERY FIRST SECURITY MEASURE YOU CAN FOLLOW! Cut-off Sensitive Information from the Web Sounds like, a common-sense thing right? But, do you remember putting your personal details o

Modular Malware - Evolving Malware Authoring

Malware or malicious software is a piece of code that is used to disrupt the target or victim system. The most common method used to target the victims is Spam or to be more specific MalSpam. Attackers use a list of email addresses crawled from the internet or the list bought from the Dark Web markets. The malware is attached to the email and is sent in huge bulk to the innocent victims form this email list. As soon as the victim opens the attachment, either the malware runs on the system or runs a dedicated script to download the malware from an external source, such as malware stored in a compromised website or from a newly registered malware author owned domain. This is the payload that does its tasks in an un-authorized way, such as stealing sensitive information, dumping passwords and cookies from browsers, gaining access to the network to which the target system is connected, and many more. All these activities are done in stealth mode, i.e., without the user being aware of. Trad

Earth Bogle APT pushes Async RAT targeting Middle East

While hunting for threats in the wild just came across an ongoing campaign that has likely been going on since the beginning of February 2023. After conducting more in-depth analysis it seems like that this campaign is strikingly similar to that of the "Earth Bogle" threat actor, that was quite active in the mid of last year. The campaign has an interesting execution flow on the victim machines, with multiple levels of payloads being executed to avoid detection at certain levels. (Fig. Kill Chain)

Powered by Blogger