Research reports

Added Sun 18 Oct

1. Infosec InstituteWeb page

   Andromeda Bot Analysis part 2

   Now, you get the original Andromeda build file. Load the unpacked sample at OllyDBG. As before, after the stack frame at the EP, you see that the malware is looking to load API's address using the PEB_LDR_DATA structure, but this time instead of kernel32.dll;…

   Malware

   Infosec InstitutePublished 28 Sep 2015
2. Infosec InstituteWeb page

   Netwalker malware: What it is, how it works and how to prevent it

   Netwalker is a data encryption malware that represents an evolution of the well-known Kokoklock ransomware and has been active since September 2019. This article will detail the specific technical features of the Netwalker ransomware. We will analyze what…

   RansomwareMalware

   Infosec InstitutePublished 29 Jul 2020
3. Infosec InstituteWeb page

   Jackpotting malware

   Jackpotting malware is not well known because it exclusively targets automated teller machines (ATMs). This means it usually doesn’t directly affect a large number of people. However, this type of malware may seriously harm the reputation and the financial…

   Malware

   Infosec InstitutePublished 5 Mar 2020
4. Infosec InstituteWeb page

   Animal Farm APT and the Shadow of French Intelligence

   Almost every government is working to improve its cyber-capabilities. The majority of them already have in their arsenal powerful espionage malware and hacking platforms. We read about the techniques and tactics implemented by a number of APT groups from…

   State-sponsoredMalware

   Infosec InstitutePublished 8 Jul 2015