avast.ioAvast Inside Out - Collection of blogs for engineering and security folks

Threat Labs Engineering Open Source Careers Menu Latest articles from Avast Threat Labs PC GuptiMiner: Hijacking Antivirus Updates for Distributing Backdoors and Casual Mining by Jan Rubín and Milánek Avast discovered and analyzed GuptiMiner, a malware campaign hijacking an eScan antivirus update mechanism to distribute backdoors and coinminers. PC Uncategorized From BYOVD to a 0-day: Unveiling Advanced Exploits in Cyber Recruiting Scams by Luigino Camastra Key Points Avast discovered a new campaign targeting specific individuals through fabricated job offers. Avast uncovered a full attack chain from infection vector to deploying FudModule 2.0” rootkit with 0-day Admin - Kernel exploit. Avast found a previously undocumented Kaolin RAT, where it could aside from standard RAT functionality, change the last write timestamp of a... PC Lazarus and the FudModule Rootkit: Beyond BYOVD with an Admin-to-Kernel Zero-Day by Jan Vojtěšek The Lazarus Group is back with an .. Know Your YARA Rules Yara Know Your YARA Rules Series: #5 Everything You Need to Know About Regular Expressions in YARA by Dominika Regéciová For the fifth post of the Know Your YARA Rules series, we want to create a comprehensive manual for regular expressions that would improve your YARA rules. Why is it so complicated? When discussing regular expressions, we must first address the elephant in the room. Regular expressions can get complicated rather quickly, mainly because they often look like winners in obfuscation games rather... Know Your YARA Rules Yara Know Your YARA Rules Series: #4 YARA-X: The Next Generation by Tomáš Ďuriš In the third post of the Know Your YARA Rules series, we mentioned that something is cooking up in the YARA world. In this post, we will investigate what the future holds for the YARA tool and its users. We are introducing the next generation of the YARA tool – YARA-X. Motivation YARA has recently celebrated its 15th anniversary (calculated from the first commit in the... Read more Created by Avast · Copyright 2024 · All rights reserved Menu Threat Labs Engineering Open Source Careers Search Recent Posts Scala Server Toolkit – Creating HTTP Server Notebooks on Machine Learning in Python GhostDNS Exploit Kit Strikes Back Rust in Avast The tangle of WiryJMPer’s obfuscation Recent Comments Archives December 2019 November 2019 September 2019 August 2019 July 2019 June 2019 April 2019 March 2019 February 2019 January 2019 August 2018 January 2018 October 2017 Categories Engineering Open Source Threat Intelligence Meta Log in Entries feed Comments feed...