Date Author Title
2024-04-23Johannes UllrichStruts "devmode": Still a problem ten years later?
2022-11-04Xavier MertensRemcos Downloader with Unicode Obfuscation
2022-09-25Didier StevensDownloading Samples From Takendown Domains
2022-03-24Xavier MertensMalware Delivered Through Free Sharing Tool
2022-02-11Xavier MertensCinaRAT Delivered Through HTML ID Attributes
2021-11-19Xavier MertensDownloader Disguised as Excel Add-In (XLL)
2021-11-10Xavier MertensShadow IT Makes People More Vulnerable to Phishing
2021-01-22Xavier MertensAnother File Extension to Block in your MTA: .jnlp
2019-12-05Jan KoprivaE-mail from Agent Tesla
2019-11-08Xavier MertensMicrosoft Apps Diverted from Their Main Use
2019-07-02Xavier MertensMalicious Script With Multiple Payloads
2018-01-26Xavier MertensInvestigating Microsoft BITS Activity
2017-12-14Russ McReeSecurity Planner: Improve your online safety
2016-12-27Guy BruneauUsing daemonlogger as a Software Tap
2014-08-17Rick WannerPart 1: Is your home network unwittingly contributing to NTP DDOS attacks?
2014-02-05Johannes UllrichTo Merrillville or Sochi: How Dangerous is it to travel?
2013-07-10Johannes Ullrich.NL Registrar Compromisse
2013-06-19Kevin ListonWinLink Check-In
2012-11-26John BambenekOnline Shopping for the Holidays? Tips, News and a Fair Warning
2012-03-01Bojan ZdrnjaMonitoring Remote Desktop Services logs ... or not?
2011-03-11Guy BruneauSnort IDS Sensor with Sguil Framework ISO
2010-10-04Mark HofmanOnline Voting
2010-03-24Johannes Ullrich".sys" Directories Delivering Driveby Downloads
2010-01-08Rob VandenBrinkMicrosoft OfficeOnline, Searching for Trust and Malware