18 min read
How and why do we attack our own Anti-Spam?
We often use machine-learning (ML) technologies to improve the quality of cybersecurity systems. But machine-learning models can be susceptible to
Tag : Backdoor
18 min read
8 min read
Avast Finds Backdoor on US Government Commission Network
We have found a new targeted attack against a small, lesser-known U.S. federal government commission associated with international rights. Despite
1 min read
IT threat evolution Q3 2021
IT threat evolution Q3 2021 IT threat evolution in Q3 2021. PC statistics IT threat evolution in Q3 2021. Mobile statistics Targeted
7 min read
Backdoor macOS.Macma Spies On Activists But Can’t Hide From Behavioral Detection
As we reported in our Deeper Dive into macOS.Macma on Monday, a suspected Chinese-backed APT has been discovered spying on Mac-using activists and
1 min read
How the SolarWinds Hack (almost) went Undetected
My lightning talk from the SEC-T 0x0D conference has now been published on YouTube. This 13 minute talk covers tactics and techniques that the
1 min read
Nobelium APT Group Uses Custom Backdoor to Target Windows Domains
Researchers from Microsoft Threat Intelligence Center (MSTIC) identified FoggyWeb, a new custom malware utilized by the Nobelium APT group to
1 min read
DarkHalo after SolarWinds: the Tomiris connection
Background In December 2020, news of the SolarWinds incident took the world by storm. While supply-chain attacks were already a documented attack
Apple Has Betrayed Its Privacy Legacy – and Will Undermine End-to-end Encryption Everywhere
Apple is a company that has always made much of its commitment to privacy, and has succeeded in turning it into a unique selling point of its
1 min read
HTB: Gobox
HackTheBox made Gobox to be used in the Hacking Esports UHC competition on Aug 29, 2021. Once the competition is over, HTB put it out for all of
1 min read
IT threat evolution in Q2 2021. PC statistics
These statistics are based on detection verdicts of Kaspersky products received from users who consented to providing statistical data. Quarterly
8 min read
Backdoored Client from Mongolian CA MonPass
Introduction We discovered an installer downloaded from the official website of MonPass, a major certification authority (CA) in Mongolia in East
15 min read
Crackonosh: A New Malware Distributed in Cracked Software
We recently became aware of customer reports advising that Avast antivirus was missing from their systems – like the following example from
15 min read
DirtyMoe: Introduction and General Overview of Modularized Malware
Abstract The rising price of the cryptocurrency has caused a skyrocketing trend of malware samples in the wild. DDoS attacks go hand in hand with the
11 min read
Kimsuky APT continues to target South Korean government using AppleSeed backdoor
This blog post was authored by Hossein Jazi. The Kimsuky APT—also known as Thallium, Black Banshee, and Velvet Chollima—is a North Korean threat
11 min read