/explore
|
You are here 
|
objective-see.org | ||
| | | | |
unit42.paloaltonetworks.com
|
|
| | | | | PGMiner is a novel Linux-based cryptocurrency mining botnet that exploits a disputed PostgreSQL remote code execution vulnerability. | |
| | | | |
blog.talosintelligence.com
|
|
| | | | | As the Akira ransomware group continues to evolve its operations, Talos has the latest research on the group's attack chain, targeted verticals, and potential future TTPs. | |
| | | | |
objective-see.com
|
|
| | | | | [AI summary] The text discusses the analysis of the FinSpy malware, a macOS implant developed by FinFisher. It outlines the malware's components, including a rootkit, persistence mechanisms, and communication with a Command & Control (C&C) server. The analysis highlights the malware's use of kernel-mode rootkit capabilities, unsigned kernel extensions, and techniques like process hiding. The text also covers detection methods using tools like KnockKnock and BlockBlock, and emphasizes the importance of monitoring for suspicious items like logind and its associated files. The conclusion underscores the significance of understanding such threats, even if they are somewhat outdated, to better defend against more advanced threats. | |
| | | | |
www.akamai.com
|
|
| | | Get an in-depth look at the Microsoft SharePoint vulnerability, the exploitation activity, and Akamai's detection and mitigation strategies. | ||
