Sunday, May 14, 2017

[Virus Bulletin Conference] The TAO of Automated Iframe Injectors - Building Drive-by Platforms For Fun and Profit

›
In this paper, we present the design of distributed infection model used by attackers to inject malicious iframes on the fly to conduct ...
Tuesday, September 29, 2015

[Updated] Nurturing JavaScript Obfuscation and Fast Flux DNS - "Whats App Voicemail Spamming" for Russian Online Pharmacies!

›
Recently, we analyzed that spammers are doing "Whats App Fake Voicemail" spamming to trick end-users to visit online pharmacies...
Monday, May 11, 2015

"Armor for Android" - Rogue Marketing but Real Business - Who Cares for Ethics !

›
Malvertisements and Fake AVs Outline: Since Android is an open-source mobile platform, it is targeted by attackers for malicious purposes....
Saturday, March 14, 2015

A Real World Story of CVE-2014-6332 : RCE and Malware Download via VBScript !

›
Recently, we have observed in our analysis that the exploit code for vulnerability with identifier CVE-2014-6332 is either directly embedd...
Sunday, February 22, 2015

A Case Study of Geo-location Filtering and Dedicated Malware Infections !

›
It is a wide-known fact that the majority of infectious code (iframe redirecting to browser exploit packs) is hosted on free domains or c...
Sunday, February 8, 2015

Virus Bulletin Paper - Prosecting the Citadel botnet !

›
Virus Bulletin published earlier our research on Citadel. Check the links: Prosecting the Citadel botnet - revealing the dominance of the ...
Sunday, August 24, 2014

BlackHat 2014 - Botnet C&C Panel Talk

›
Whitepaper: http://secniche.org/blackhat-2014/blackhat_2014_briefings_whitepaper_exp_cc_flaws_adityaks.pdf
Tuesday, April 15, 2014

Targeted Cyber Attacks Book - Syngress !

›
Update: A very insightful review of the book published in Network Security. Network Security : Book Review : Targeted Cyber Attacks ...
Thursday, February 27, 2014

Gmail Phishing Attack - Why the Anti-spam Solutions Fail to Trigger ?

›
Update: 5th March, 2014 Note: I am concerned because it got delivered to my personal gmail inbox -:) It looks like the phishing att...
Sunday, January 12, 2014

Virus Bulletin - NiFramer Iframer Injector - CPanel

›
A couple of months earlier, we released a paper on the design of NiFramer, a bash tool to automate the Iframe injections on the compromised ...