The hidden C2: Lampion trojan release 212 is on the rise and using a C2 server for two years
The hidden C2: Lampion trojan release 212 is on the rise and using a C2 server for two years.
Categoria: segurancainformatica
Threat Report Portugal: Q4 2021
Threat Report Portugal Q4 2021: Phishing and malware by numbers.
HelloKitty: The ransomware affecting CD Projekt Red and Cyberpunk 2077
HelloKitty: The ransomware affecting CD Projekt Red and Cyberpunk 2077
Taking the bait: The modus operandi of massive social engineering waves impacting banks in Portugal
Taking the bait: The modus operandi of massive social engineering waves impacting banks in Portugal in the last two years.
Android vulnerability allows attackers to spoof any phone number
Introduction Because many employees use mobile devices for work, the widespread use of mobile devices has come to put company networks at risk for cyberattacks….
What is a side-channel attack?
Introduction The origin of the side-channel attack is closely related to the existence of physically observable phenomena caused by the execution of computing tasks in…
NetWire malware analysis
NetWire is a remote access Trojan focused on password stealing and keylogging, as well as including remote control capabilities. This threat has been used by…
MalLocker Android ransomware analysis
Malware is persistent presence in our life. In the past few months, several pieces of different malware families were identified as affecting mobile devices. This…
Threat Report Portugal: Q3 2021
Threat Report Portugal Q3 2021: Phishing and malware by numbers.
Hack de certificados de vacinação COVID-19 no mundo e em Portugal
Hack de certificados de vacinação COVID-19 no mundo e em Portugal.
Troystealer malware analysis
We are living in an era where malware is part of our daily lives. Emergent campaigns are increasing, each more sophisticated and harder to detect…
How to create a subdomain enumeration toolkit
Introduction A domain name is an important part of the reconnaissance process during a security assessment or even for many bug bounty challenges. In this…
Using Merlin agents to evade detection
Introduction While penetration testing and Red Teaming are crucial to check a system’s security and to validate potential entry-points in the infrastructure, sometimes establishing an…
Fuzzing introduction: Definition, types and tools for cybersecurity pros
Introduction Fuzzing is a black-box software testing technique and consists of finding implementation flaws and bugs by using malformed/semi-malformed payloads via automation. Fuzzing an application…
Malware analysis: Details on LockBit ransomware
Introduction LockBit is a data encryption malware in operation since September 2019 and a recent Ransomware-as-a-Service (RaaS), in which developers are in charge of the payment site…
Ransomware deletion methods and the canary in the coal mine
Introduction Ransomware is an emergent threat. Every week, there is a new and notable outbreak of this class of data encryption malware. From Ragnar Locker to Netwalker, the threats…