Research reports
1,224 reports from 387 publishers45 added in the past week
3 reports, newest added first
Added Mon 19 Oct
Added Wed 14 Oct
APT37 Ruby Jumper: Air-Gap Attack via Removable Media
ThreatLabz details the Ruby Jumper campaign in the following sections, focusing on the specific malware employed, the deployment methods, and how the final payload is delivered to achieve the ultimate objective. Attack flow The figure below illustrates the…
State-sponsored
Added Fri 9 Oct
Technical Analysis of 2CLoader
Important strings in 2CLoader are decrypted at runtime using an inlined bitwise XOR operation applied to global values. The key in the analyzed sample is 0x37 . Indirect system calls For the Nt* APIs listed below, 2CLoader prefers indirect system calls to…
Malware
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.