Lumu Technologies’ Post

Palo Alto Networks Unit 42 analyzed the newly released BunnyLoader 3.0. The third generation of malware-as-a-service returned redesigned and enhanced. Authors reduced payload size, and the stealer, clipper, keylogger, and DoS modules are now separate binaries. It also includes new denial-of-service (DoS) features, which can launch HTTP flood attacks on a target URL. Sigma rules to detect #Bunnyloader activity: https://lnkd.in/gZVCXRjH #Malware #Cyberattack #Cybersecurity #BlueTeam #ThreatHunting

Fascinating paper that highlights the need for protection against the unknowns that frequently bypass EDR & XDR solutions. #cybersecurity #security #amtd #morphisec #AMTD #CISO #CSO #EDR #malware

Take our self assessment, check your readiness

🔒 Discover the latest insights from the VMRay Labs team shedding light on the evolution of malware evasion techniques. In their recent article, they delve into the significance of indirect syscalls, highlighting how these tactics complicate detection processes and emphasize the need for advanced monitoring methods. 🕵️♂️ Dive into the details of #Pikabot's implementation of these evasion techniques and their impact on hooking-based EDRs 🛡️ Explore how VMRay's transition-based monitoring approach remains undetectable and resilient to evasion attempts, operating beyond the observable range of malware processes. 𝐂𝐨𝐧𝐧𝐞𝐜𝐭 𝐰𝐢𝐭𝐡 𝐨𝐮𝐫 𝐞𝐱𝐩𝐞𝐫𝐭 𝐭𝐞𝐚𝐦 𝐚𝐭 𝐄𝐥𝐢𝐭𝐞𝐕𝐀𝐃 𝐟𝐨𝐫 𝐦𝐨𝐫𝐞 𝐢𝐧𝐟𝐨𝐫𝐦𝐚𝐭𝐢𝐨𝐧. 𝐘𝐨𝐮 𝐜𝐚𝐧 𝐫𝐞𝐚𝐜𝐡 𝐮𝐬 𝐛𝐲 𝐬𝐞𝐧𝐝𝐢𝐧𝐠 𝐚𝐧 𝐞𝐦𝐚𝐢𝐥 𝐭𝐨 𝐬𝐚𝐥𝐞𝐬@𝐞𝐥𝐢𝐭𝐞𝐯𝐚𝐝.𝐜𝐨𝐦. EliteVAD https://lnkd.in/djUmMxmK

🕵️♂️ Unmasking the #DarkGate #malware: 🚨 Emre Güler from our Labs team deep dives into DarkGate's delivery chain, AutoIt usage, shellcode execution, and payloads. https://bit.ly/4b4mc51   👉 Key Highlights:   - Explore a comprehensive overview of DarkGate's intricate delivery chain   - Learn about how DarkGate uses compiled and protected AutoIt scripts, adding an extra layer of challenge   - Discover how DarkGate executes its malicious code   -  Uncover the final payload details and arm yourself with the Indicators of Compromise (IOCs).   🛡️ Don't miss out on this essential read for #cybersecurity enthusiasts! Check out the detailed analysis in our latest blog article: https://bit.ly/4b4mc51   #MalwareAnalysis #ThreatIntelligence

Threat actors continuously improve their techniques to create increasingly sophisticated #malware that evades security solutions. This is where you need to consider a next-gen #sandbox approach and discuss with Jan Miller founder of Filescan GmbH and ex CrowdStrike... OPSWAT MetaDefender Sandbox’s unique adaptive threat analysis technology enables zero-day malware detection and extracts more indicators of compromise. MetaDefender Sandbox is an emulation-based sandbox, it was built with power, speed, and efficacy in mind. ✅ 10X Faster than a traditional sandbox ✅ 100X More Efficient https://lnkd.in/euFYA5Y8 #sandbox #detection #malwaredetection #opswat #malwareanalysis #zerodayattacks #cybersecurity #cyberessentials #malwaredefense

Headed to RSAC 2024 in a couple weeks? Let's meet-up! As the technology innovators of the ultra-secure OS for businesses and government, we look forward to sharing our unique approach to endpoint security. Learn more about how to protect your endpoints against threats like ransomware with NoTouch OS. Request to join our VIP Networking event with XenTegra and Parallels: https://bit.ly/3Q3YyN6 #RSAC2024 #Stratodesk #NoTouchOS #SecureOS #cybersecurity #endpointsecurity

Obfuscate the MOV RAX,GS:[60h] that is used to retrieve the PEB address, using RDGSBASE ;) If you're wondering what the PEB is, here are a couple of posts by Marcus Hutchins https://lnkd.in/exP6AZux https://lnkd.in/eQtbCWuU don't forget to share, Like, comment :) 𝐞𝐝𝐢𝐭: check this => https://lnkd.in/ewuQRvNW #cybersecurity #infosec #malware #redteam #reverseengineering #x86 #antidebugging #malwareanalysis

Blocking Zero-Day #Malware in Open-Source Components Stop threats before they hit. Xygeni’s real-time detection, automatic blocking, and CI/CD integration secure your OS components from zero-day attacks #CyberSecurity #OpenSource https://lnkd.in/eNhCDgJH

I'm excited to share this one... Big changelog for our #CERT's #ransomware cartography! Orange Cyberdefense CERT is excited to announce that the new version (v27) is now available on our Orange Cyberdefense CERT GitHub: https://lnkd.in/eyUq7ebc 💡 In this release, entities are clickable, giving our World Watch clients direct access to detailed information on threat groups and malware strains. #cyberthreatintelligence #CTI #ransomware #cybersecurity #threatintelligence