Security through explanation
This update adds a new feature to AndroidProjectCreator: the compact installation of all dependencies. To update to this version, simply replace the JAR and replace it with the new release. To quickly install AndroidProjectCreator, one can use the compact installation, as is shown below. java -jar ./AndroidProjectCreator.jar -compactInstall This clones all required tools from a … Read more
MalPull has received an overhaul, as it is now uses multiple threads to download the given hashes concurrently. It is now also able to download samples from VirusTotal, if you have a working API key. This release contains breaking changes compared to the last version, as the command-line arguments have been changed. At first, the … Read more
On the 20th of June 2020, iHack took place as a virtual conference with two capture the flag games. The beginner CTF was aimed at starters, whereas the classic CTF was aimed at players who already played in a few CTF competitions. The MalwareTheFlag team created 9 challenges for the CTF. Four write-ups are given … Read more
Additions Added the A year in review: 2019-2020 article to the miscellaneous chapter. To contact me, you can e-mail me at [info][at][maxkersten][dot][nl], or DM me on BlueSky @maxkersten.nl.
Additions Added the JavaScript string concatenation deobfuscation article to the analysis scripts chapter. To contact me, you can e-mail me at [info][at][maxkersten][dot][nl], or DM me on BlueSky @maxkersten.nl.
People learn by doing, hence the saying practice makes perfect. Not everything that people make, is published. Sometimes researchers deliberately refrain from publishing specific material. In this blog, I want to talk about the balance between malware creation and malware research. Needless to say, the type of creation that is covered in this blog, is … Read more
MageCart groups have been roaming around for a while, infecting web shops left and right. Researchers have looked into the technical aspects of the skimmers, as have I. The recent COVID-19 pandemic opened up the playing field even further, which both criminals and researcher saw. Malwarebytes’ Jérôme Segura reported that there was a 26% increase … Read more
Additions Added the Corona Locker article to the Malware analysis chapter. To contact me, you can e-mail me at [info][at][maxkersten][dot][nl], or DM me on BlueSky @maxkersten.nl.
Additions Added the Emotet JavaScript downloader article to the Malware analysis chapter. To contact me, you can e-mail me at [info][at][maxkersten][dot][nl], or DM me on BlueSky @maxkersten.nl.
MalPull version 1.0-stable has been released! All information about the tool can be found here. This first release contains the basic functionality, but more features can always be added. Feel free to suggest features via the contact methods at the bottom of this post. Bugs can be reported in the same manner. To contact me, … Read more