The case of getlook23: Using GitHub Issues as a C2
This is a brief analysis of a sample I came across on twitter which uses a GitHub issue as a communication channel for the malware. Although »
Malware Persistence: HKEY_CURRENT_USER Shell Extension Handlers
This article was transferred from the @herrcore blog. Update June 8, 2015: Harlan (@keydet89), of Regripper fame, has updated Regripper to identify this persistence mechanism. Details »
Inside The New Asprox/Kuluoz (October 2013 - January 2014)
This article was transferred from the @herrcore blog. In the past few months we have seen asprox rise to be one of the leading e-mail distributed »
Exposing Malware In Hidden Desktops Using CmdDesktopSwitcher
This article was transferred from the @herrcore blog. Have you ever come across malware that has opened a window that you just can’t see? You »
Screensaver Malware: Using .scr Executables
This article was transferred from the @herrcore blog. Remember way back around 2006 when custom screen savers were the new hotness and everyone was googling " »