DearCry Makes Organisations Cry
Note: We have also done a technical analysis on DearCry. Read here. It’s a warm summer morning. While sipping your […]
Category: SOC Analysts
New Wave of Targeted Hacking Campaigns and Ransomware Attacks Exploiting Microsoft Exchange Server Vulnerabilities
Multiple threat actors, including Hafnium, LuckyMouse, Calypso, Winnti, Bronze Butler, Websiic, Tonto, Mikroceen, and DLTMiner, are actively targeting four zero-day […]
Building a covert SMTP infrastructure
Introduction Phishing is a ray of light when every attempt to breach an organization fails. However, setting up a covert […]
Token Manipulation Attacks – Part 2 (Process of Impersonation)
In the previous blog-post, we learned about the Tokens and Privileges which are assigned to the user by the system. […]
Anti-Forensics CISOs & Executives Cloud Security Cybersecurity Threat Intelligence & Analysis Hacks Incident Response Malware Analysis Penetration Testing Security Testing SOC Analysts
Malware on Steroids – Part 1: Simple CMD Reverse Shell
The Prologue This is my reposting of the blog series I wrote here at ScriptDotSh If you haven’t watched the […]
Memcache Exploit
What is Memcache? Memcache is temporary data storage service which stores data in <key> :< value> format. It improves the […]
CISOs & Executives Cloud Security Cybersecurity Threat Intelligence & Analysis Fundamentals Hacks Malware Analysis Research SOC Analysts Tools Uncategorized
Malware Development – Welcome to the Dark Side: Part 2-1
Welcome to the second part of the malware development blog series. Here’s the link to Part 1. Given the length […]
Threat Hunting for Masquerading Windows Processes
An important aspect of effective threat hunting is to understand what is normal in an environment. If a threat hunter […]
Getting System Access using Malicious Word File
[[Post was originally posted on 23rd May, 2017 at invadersam.com]] Microsoft Office Word / Wordpad remote code execution vulnerability allows […]
Hunting Phish Domains
Most organizations face a barrage of attacks every day from threat actors around the globe. Among the various vectors, attackers […]