A team of academic researchers has devised a new user tracking strategy. Dubbed “DrawnApart”, this… Researchers Devise “DrawnApart” – A GPU Fingerprinting Technique on Latest Hacking News. click here to read full Article Read...
red teaming evasion technique to defeat and divert detection and prevention of security products.Mortar Loader performs encryption and decryption of selected binary inside the memory streams and execute it directly with out writing any...
Proofpoint identified three state-sponsored threat actors from India, Russia, and China adopting RTF template injection methods in their phishing campaigns. The adoption of this technique has made attacks from the group much harder to...
Called RTF Template Injection, this attack is a variation of a classic template injection attack that has been known for years, hence it is included in the MITRE ATT&CK framework already. click here to...
ZipExec is a Proof-of-Concept (POC) tool to wrap binary-based tools into a password-protected zip file. This zip file is then base64 encoded into a string that is rebuilt on disk. This encoded string is...
The infamous TrickBot malware has now adopted another evasive feature to escape security checks. As… New TrickBot Phishing Technique Checks Device Screen Resolution To Evade Detection on Latest Hacking News. click here to read...
A novel class of vulnerabilities could be leveraged by threat actors to inject visually deceptive malware in a way that’s semantically permissible but alters the logic defined by the source code, effectively opening the...
[*] A PoC implementation for an advanced in-memory evasion technique that spoofs Thread Call Stack. This technique allows to bypass thread-based memory examination rules and better hide shellcodes while in-process memory. Intro This is...
The maintainers of Node.js have patched two HTTP request smuggling (HRS) vulnerabilities in the JavaScript runtime environment, including one found using what appears to be a new HRS technique. click here to read full...
Google researchers highlighted a new threat in the form of OpenSUpdater used by cybercriminals who are targeting people prone to downloading cracked versions of games and other popular software in the U.S. However, Microsoft...
The technique uses “binary visualization” libraries to transform the markup and code of web pages into images. Using this method, they created a dataset of legitimate and phishing images of websites. click here to...
A team of researchers at Ben-Gurion University came up with a new attack vector called Glowworm that can enable eavesdropping on Zoom and other virtual meetings by analyzing optical emission from a LED of...
Academics discovered a novel DDoS attack vector abusing the TCP protocol. The new DDoS technique can be used to launch attacks with amplification factors in the realm of 1000x and more. click here to...
A study from computer scientists at Columbia Engineering reveals a way to encrypt personal images on popular cloud photo services without requiring any changes to – or trust in – those services. click here...
McAfee Labs described the use of DLL sideloading in REvil’s attacks after the group made a sudden exit that surprised everyone. Generally, this technique is used by APT groups to avoid raising any flags...
Once its infection routine is completed, this ransomware variant replaces the desktop wallpaper with a dropped .bmp file notifying the victim to look for a file containing instructions. click here to read full Article...
