yaracroft @venom@nanao.cybtex.fr

🛠 Get-UnJlaive is a tool which is able to reconstruct Jlaive (.NET Antivirus Evasion Tool (Exe2Bat)) to original Assembly and stub Assembly. #tools #windows #malware #powershell #infosec #informatique

https://github.com/Dump-GUY/Get-UnJlaive

🗃️ Emotet

• Emotet Being Distributed Using Various Files
  🔗 https://asec.ahnlab.com/en/34556/

• Emotet DLL Part 2: Dynamic Analysis
  🔗 https://www.atomicmatryoshka.com/post/emotet-dll-part-2-dynamic-analysis

• Emotet Moves to 64 bit and Updates its Loader
  🔗 https://blogs.vmware.com/security/2022/05/emotet-moves-to-64-bit-and-updates-its-loader.html

• Emotet x64 Stack Strings Config Emulation
  🔗 https://research.openanalysis.net/emotet/emulation/config/dumpulator/malware/2022/05/19/emotet_x64_emulation.html

• Since its return in November 2021, Emotet has once again become one of the most prolific malware families.
  🔗 https://unit42.paloaltonetworks.com/emotet-malware-summary-epoch-4-5/

• The Resurgence of the Emotet Botnet Malware
  🔗 https://www.trendmicro.com/en_us/research/22/e/bruised-but-not-broken--the-resurgence-of-the-emotet-botnet-malw.html

#microsoft #malware #feodo #cyber #emotet #mealybug #mummyspider #ta542 #botnet #emulation #geodo #threats #x64 #windows #loader #informatique

🇫🇷 Retour sur la mise à l'écart subite de Christian Daviot.

https://www.lalettrea.fr/action-publique/2022/05/19/anssi--comment-le-conseiller-de-poupard-a-ete-ecarte-pour-sa-proximite-avec-huawei-et-pekin,109785864-eve

https://www.marianne.net/societe/defense/risque-despionnage-un-fonctionnaire-de-la-cybersecurite-vire-pour-sa-proximite-avec-la-chine-et-huawei

#france #gouvernement #surveillance #politique #cyber #secret #china #technologies #digital #gouvernance #numérique #strategic #intelligence #crypto #defense #chine #governement #networks #pandemic #threats #informatique

🇨🇴 Noticias Caracol (noticias.caracoltv.com) y Blu Radio (bluradio.com), blancos de ciberataque. #colombia #cyber #ransomware #threats #radio #television #networks #databreach #services #colombie #informatique

https://www.elcolombiano.com/colombia/noticias-caracol-y-blu-radio-blancos-de-ciberataque-CG17552660

🔓 When eBPF meets TLS

• eBPF & Networking
• eBPF & Userspace
• Dump TLS Keys & Decrypt Traffic
• Transparent Traffic Interception

#tls #networks #monitoring #cryptopgraphic #interception #browser #software #traffic #technologies #cyber #web #threats #informatique

https://raw.githubusercontent.com/quarkslab/conf-presentations/master/CanSecWest-2022/When%20eBPF%20meets%20TLS.pdf

🇪🇺 Les dangers introduits par l'Article 45.2 de la proposition de révision du règlement eIDAS. #europe #digital #crypto #cyber #framework #government #numérique #agenda #transformation #ia #market #gouvernance #internet #backdoor #future #software #freedom #access #trading #generic #browser #interception #management #technologies #legal #eidas #regulation #tls #codebreakers #security #workforce #cryptographic #networks #providers #confidential #strategic #citizens #data #ssl #identities #electronic #web #signatures #solutions #quantum #ai #surveillance #standardization #initiatives #intelligence #monitoring #traffic #fingerprinting #economic #juridique #cryptopgraphic #droit #business #informatique

https://www.laquadrature.net/2022/05/20/revision-du-reglement-eidas/

🔒 Combination of TLS & HTTP fingerprinting. Open-source browser Firefox flagged as « suspicious » by anti-bot protection by a customer-specific rule. #browser #tls #software #web #access #networks #technologies #firefox #fingerprinting #traffic #regulation

https://lwthiker.com/opensource/2022/05/21/firefox-flagged-suspicious.html

CVE-2021-3929/CVE-2021-3947 : Recursive MMIO VM QEMU Escape PoC #cyber #threats #vuln #informatique
https://github.com/QiuhaoLi/CVE-2021-3929-3947

🛠 Bitlocker key recovery with MemProcFS #tools #infosec #informatique

https://github.com/ufrisk/MemProcFS/wiki/FS_BitLocker

🇵🇪 Les opérateurs BlackByte revendiquent l'attaque informatique contre La Contraloría General de la República (gob.pe) #peru #cyber #ransomware #blackbyte #databreach #government #threats #pérou #informatique

Developers often make typical mistakes that allow an attacker to gain access to the app's internal files, which store sensitive data. This article describes the most typical mistakes. #cyber #mobile #security #application #dev #threats #informatique

https://blog.oversecured.com/Android-security-checklist-theft-of-arbitrary-files/

🇿🇦 Pharmacy retailer Dis-Chem (dischem.co.za) announced a data breach affecting the personal details of 3.6 million customers. #southafrica #pharma #care #store #online #healthcare #cyber #products #clinics #medication #health #beauty #premium #services #medical #insurance #customers #market #databreach #informatique

https://www.youtube.com/watch?v=VZLHhaQKeZ0

🇦🇷 It took 6 hours to get access to every IT system of Argentina's Senate ( Vice Society )

When they realized that we crypted their network we were still there. We were watching them using their cameras. It was funny.

#argentina #government #vicesociety #ransomware #city #databreach #cyber #senate #networks #threats #internet #argentine #informatique

https://www.databreaches.net/it-took-6-hours-to-get-access-to-every-it-system-of-argentinas-senate-vice-society/

#Lockbit revendique l'attaque.

🇺🇸 Cyberattacks target New Mexico school districts #usa #cyber #ransomware #education #databreach #threats #informatique

https://www.youtube.com/watch?v=IiCnn_KqRl0

🇫🇷 Document de référence et déploiement de l'Identité Nationale de Santé

https://industriels.esante.gouv.fr/produits-et-services/ins-referentiels-et-deploiement-de-l-identite-nationale-de-sante

🇫🇷 L'ANS présente l'INS. « L'INS, c'est l'identité que tous les professionnels vont utiliser pour nous identifier en tant que patients, en tant qu'usagers et ainsi référencer toutes nos données de santé » #france #internet #web #santé #cyber #medical #data #numérique #health #threats #software #business #industries #solutions #informatique

https://www.youtube.com/watch?v=_WmDmEoIIGA

🇺🇸 A massive data breach has exposed four years' worth of records of nearly 500,000 Chicago Public Schools students and just under 60,000 employees, district officials. #cyber #ransomware #threats #education #databreach #informatique

https://chicago.suntimes.com/education/2022/5/20/23132983/cps-public-schools-data-breach-students-employees-records-battelle-kids

Over the last year, ransomware attacks have continued to plague institutions[..] #cyber #ransomware #threats #malware #informatique

https://www.youtube.com/watch?v=p8SBvm-wv7w

In 2017, a group of former GameOver Zeus network affiliates referring to themselves as « The Business Club » changed the tactics they had been using for the past few years to adopt ransomware. #cyber #malware #threats #ransomware #informatique

https://www.linkedin.com/pulse/good-grief-getting-over-pain-iocs-nicholas-carroll