PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Nguy cơ lộ lọt thông tin cá nhân NGHIÊM TRỌNG do các loại mã độc đánh cắp thông tin - Oski Malware

blog.viettelcybersecurity.com | research | #threat-intelligence | #credential-theft | #malware-analysis | #info-stealer | #maas | #oski-stealer
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Viettel profiles Oski Stealer, a Malware-as-a-Service infostealer: one campaign harvested 20,000 logins and a million-plus cookies, feeding a dataset of 50 million users since 2019.
Published
Collected

Related coverage

research · blog.viettelcybersecurity.com
Nguy cơ lộ lọt thông tin cá nhân NGHIÊM TRỌNG do các loại mã độc đánh cắp thông tin - Redline Stealer
Viettel Threat Intelligence warns about Redline Stealer, an info-stealer sold as Malware-as-a-Service: stolen logs include Vietnamese credentials for banking, government and media systems.
tool · github.com
LogonStealer: Windows Credential Provider DLL for Stealing Plaintext Passwords via CredProvDataModel Hooks
Demonstrates an effective post-exploitation technique targeting the modern Windows 11 WinRT logon architecture to harvest plaintext credentials while bypassing PPL.
research · blog.viettelcybersecurity.com
Một vài phương pháp deobfuscate trong quá trình phân tích mã độc Android
Practical deobfuscation techniques for Android malware analysis: extracting encrypted strings from smali with Python scripts, or automating decryption using JEB with Jython scripts.
research · blog.viettelcybersecurity.com
Unpack Themida Malware
Viettel Threat Intelligence shares techniques for unpacking Themida-packed malware, covering anti-debug bypass with ScyllaHide, locating OEP, dumping the process and rebuilding the IAT.
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
research · hunt.io
Ukraine’s State Data-Exchange System Targeted by Russian-Speaking Operator via Graylog Log4Shell
An exposed open directory revealed a solo operator's full Log4Shell chain against a Graylog host holding Trembita logs, with the access log that proves execution.
Back