Some stuff about security..

DISCLAIMER: This blog is a set of personal notes I have decided to make public. Please, ignore any typo or language error

Tuesday, June 14, 2016

Neutrino EK and the abuse of .TOP domains ramping up

A few days ago there were several news that some threat actors were switching from Angler EK to Neutrino EK. The blog " Malware don...

Sunday, May 29, 2016

Malicious Excel documents with macros running shellcodes

Some weeks ago I got a very interesting MS Office Excel document. The file is in VT also since a couple of weeks and it has a very low det...

Wednesday, May 25, 2016

Dridex campaign on the 23rd and 24rd of May - using fake PKCS#12 files

Dridex has been very active in the last 2 days. I have seen more than 40k emails sent during a window frame of 36 hour and I have identif...

Sunday, May 8, 2016

Solution to Google CTF Mobile Challenge III Intentions

I do not usually play CTF challenges, but they are indeed a very good way to challenge your skills and and learn a lot. A few days ago t...

Thursday, March 31, 2016

Petya Ransomware: Threat Actors ready since December 2015

A few days ago TrendMicro made public in his blog that they found a new family of Crypto-Ransomware which is able to overwrite the MBR. T...

Tuesday, March 22, 2016

Triada malware: hitting the android core system (part II)

Following my previous post I took a look to another sample from this same malware family. This second sample was reported ...

View web version

Powered by Blogger.