https://malgregator.com/tags/pos/ Recent content in POS on malgregator Hugo -- gohugo.io en you@example.com you@example.com Fri, 11 May 2018 08:01:00 +0000 https://malgregator.com/post/week-19-2018/ Fri, 11 May 2018 08:01:00 +0000 you@example.com https://malgregator.com/post/week-19-2018/ There is a first ransomware which is taking advantage of a new Process Doppelgänging fileless code injection technique. Working on all modern versions of Microsoft Windows, since Vista. This variant of a known SynAck ransomware is using NTFS transactions to launch a malicious process by replacing the memory of a legitimate process. https://malgregator.com/post/week-07-2018/ Thu, 15 Feb 2018 22:45:00 +0000 you@example.com https://malgregator.com/post/week-07-2018/ The Fidelis Cybersecurity researcher Jason Reaves demonstrated how covertly exchange data using X.509 digital certificates. The proof of concept code is using SubjectKeyIdentifier and generating certificates on the fly. https://malgregator.com/post/week-11-2017/ Sun, 19 Mar 2017 21:20:00 +0000 you@example.com https://malgregator.com/post/week-11-2017/ MalwareMustDie analyzed new APT Campaign with the Poison Ivy RAT payload. Malware is using obfuscated VBScript, Power Shell to finally drop well known RAT. 'The concept of infection is fileless, it's avoiding known signature for detection by multiple encodings and wraps, and it is also 100% avoiding the original attacker's working territory.'