An all-star guide to tackling the analysis and detection of malware that targets the Android operating system.

an analysis of the root cause of this vulnerability, where MDLs are in play

Satellites play an indispensable role in modern life, providing essential services such as telecommunications, global navigation, and earth observation. In recent years, we've seen an explosive growth in the number of satellites, primarily in the Low Earth…

When, what and why As a national CERT we analyse all kinds of incidents. Some of them involve widespread APT campaigns, othertimes we just focus on everyday threats. Recently we got notified about a new malspam campaign targeting Polish users and decided…

The botnet run by TeamTNT has set its sights on Docker and Kubernetes environments, Redis servers, Postgres databases, Hadoop clusters, Tomcat and others.

The #FSB of Russia was attacked by #moobot #Botnet with #DDoS method #tcp_ack_flood
Attack time: 2023-09-18 20:50:29(UTC+8)
Target IP: 213[.24.76.23
Related domain names:
- www[.fsb.ru
- fsb[.gov.ru

moobot C2: dd[.gaybooba.cc:55552

A C++ tool to unstrip Rust/Go binaries (ELF and PE) - h311d1n3r/Cerberus

Quarkslab conference talks. Contribute to quarkslab/conf-presentations development by creating an account on GitHub.

Platform that enables Windows driver development in Rust - microsoft/windows-drivers-rs

This article presents the internals of Windows Container.

Quickly find differences and similarities in disassembled code - google/bindiff

In this article, we discuss our research approach for investigating Xiaomi routers. We discovered multiple vulnerabilities allowing Remote Code Execution (RCE) on several models, through both LAN and WAN interfaces. This work led to the publication of four…

Discover a comprehensive technical analysis of Lu0Bot, a Node.js malware with near-unlimited capabilities, and collect IOCs.

(New to this series? Consider starting from part 1)
At the end of the last post, we started to get some interesting functionality with the ability to resolve addresses to names in a module. This was the last functionality missing before we could implement…