Research reports
1,224 reports from 387 publishers45 added in the past week
1 report, newest added first
Added Sun 25 Oct
PlugX: Bad guy disguises as an msi file
Use msitool to extract msidump -s -t mal.msi . In File.idt , we can see that there are 3 embed file. These files are extracted to %LOCALAPPDATA\kjnBsLsJo\ Upon running, the program opens an pdf file called Meeting Invitation.pdf 2. DLL Side-loading technique…
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.