https://malgregator.com/tags/theshadowbrokers/ Recent content in TheShadowBrokers on malgregator Hugo -- gohugo.io en you@example.com you@example.com Fri, 09 Feb 2018 19:20:00 +0000 https://malgregator.com/post/week-06-2018/ Fri, 09 Feb 2018 19:20:00 +0000 you@example.com https://malgregator.com/post/week-06-2018/ A buffer overflow vulnerability in older Starcraft version enabled modders to create new maps, so Blizzard tasked reverse engineer to safely emulate the bug in the newer, fixed version. The author says it all: 'This is a tale about what dedication to backward compatibility implies.' https://malgregator.com/post/week-19-2017/ Tue, 16 May 2017 22:50:00 +0000 you@example.com https://malgregator.com/post/week-19-2017/ You have probably heard about the WannaCry/WannaCrypt/WannaWhatever worm spreading ransomware, because of the sensation created by parties profiting from the scare tactics. But also because it is using really good spreading technique - exploiting MS17-010 SMB vulnerability leaked from the NSA. Some post-mortem analysis of the first version (with the killswich) and TheShadowBrokers blog are listed below. Crypto is working, so no trivial decrypter is probable, except if the keys are published. https://malgregator.com/post/week-15-2017/ Sun, 16 Apr 2017 23:40:00 +0000 you@example.com https://malgregator.com/post/week-15-2017/ Interesting blog about the generic unpacking of the Locky malware using Radare r2pipe, python and the Windows 7 VM. https://malgregator.com/post/week-14-2017/ Sun, 09 Apr 2017 19:15:00 +0000 you@example.com https://malgregator.com/post/week-14-2017/ The Cisco Talos team has analyzed ROKRAT remote administration tool targeting South Koreans by spear phishing campaign.