2015 Android malware Threat Report-threats caused by Android ransomware and SMS Trojans
Previous LinkPopular Android malware family in the second half of 2015
Some of the most popular global malware families were reported during the second half of the year to steal device data through ransomware, SMS sending applications, and Trojans. The overall perception of H
,malicioussoftware abbreviation) refers to software that can affect and harm users and system operations without the user's permission to install, including viruses (Virus), worms (worm), Trojan horses (Trojan), Backdoor procedures (Backdoor/rootkit), Password theft programs (MAL.PSW), and other software that has the malware features listed above.
Analysis Principles and processesKeyword definition:1)
How to build a automated analysis platform for Cuckoo malware
0x00 cuckoo Overview
Cuckoo is an open-source automated malware analysis system. It is mainly used to analyze malware on the windows platform, but its framework supports both Linux and Mac OS. Cuckoo can automatically obtain the following information:Tracking of ma
Linux Malware detection tool and Anti-Virus engine ClamAV installation tutorial
Malware is any software program designed to interfere with or damage the normal operation of the computing system. Although the most notorious malware include viruses, spyware, and advertising software, their attempts do not cause the same harm: Some steal private information, some de
Four Common evasion techniques for malware
Malware escaping technology is always evolving. At the RSA Conference last month, the co-founder of Lastline told a picture of evading technology development. This report titled "exposure and deconstruct of evading malware" further validates the idea that "anti-virus software is not dead, but cannot keep up with the time
department.Shortcuts are simple and effective. He does not need to exploit the vulnerability. The vulnerability attack consumes a large amount of resources and requires that the attacker's computer have a security vulnerability. You only need to forge shortcuts into folders or document files. Once attackers prepare malicious programs and add a line of simple scripts, the attack will take shape.How can we prevent such attacks? Generally, there is no s
Sharing Android platform maliciousProgramSamples and analysis results are designed to develop better detection tools.
Yajin Zhou and xuxian Jiang, two researchers from the Department of Computer Science at North Carolina State University, initiated the Android malware genome project to share samples and analysis results of Android malware and are committed to developing better detection tools.
Resear
Havex: malware targeting industrial control devices
Over the past year, we have maintained a high degree of attention to the Havex malicious program family and the organizations behind it. Havex is considered to be a malware that targets different industries and is particularly interested in the energy industry in the initial report.
Havex mainly consists of Remote Access Trojan (RAT) and server
Today, "Rogue software" has become between the virus and normal software between a special software exists, and as the general software writers for money bundled "rogue software" increased, the intrusion of the user's behavior more and more fierce, exactly this harm to continue to when? Now that we have no answer to this question, how can we realistically maintain the security of our network and systems and prevent "malware" from entering our system?
Advanced malware is the latest and most potentially destructive threat in the online world. They are confidential, targeted, and extremely patient ". Although some well-known malware usually carry signatures that are easy to identify, they can always escape the defense of general recognition modes through constant changes. In addition, they usually focus on specific goals and "carefully" before achieving th
Remnux is a Linux-based system for reverse engineering and malicious analysis.Code.
The software installed on remnux includes:
Analyze flash malware: swfttools, flasm, flare, rabcdasmand xxxswf. py
Interacting with IRC bots: IRC server (inspire ircd) and client (epic5)
Observe and interact with network activities: Wireshark, honeyd, inetsim, fakedns, fakesmtp, Netcat, networkminer, ngrep, pdnstool and tcpdump
Decode javascript: Firefox fireb
How to deal with Android shutdown and hijacking of malware?
At the beginning of the new year, a piece of news came out in the security industry: A new Android malware is determined to steal all your secrets and identities, write down your every action and take a video, it may even steal your child before birth. This malicious software is called Shutdown Hijack (PowerOffHijack, or Shutdown Hijack in some cir
Five methods to respond to malware
A few years ago, in a project, due to targeted malware attacks, I studied more than 10,000 computers involved in botnets. The main problems with these computers are the extremely weak security measures, such as the absence of vulnerability tests and the excessive dependence on traditional anti-virus software. Communication between the security team, the desktop support tea
When we use the computer to find the virus, is already your computer virus, but these trojans their ultimate effect is to achieve their propaganda and steal purposes, take the most common example, we sometimes installed a software after we found that our computer IE homepage has been replaced, this time you should pay attention to, Then it must be your computer malware, then how to solve, we can use the command menu to run the method, you can query Ba
How can malware bypass the most advanced security measures?
This year, new reports are reported almost every week on the subject of data leaks from a large blue-chip company with strong financial resources. These companies usually purchase and deploy the most advanced security tools, but attackers can still break through their layers of defense. Even worse, many attacks are often not discovered for several months. Let's take a look at how this happens
Author: Serdar yegulphosphatase
In the past few years, our computers have suffered unprecedented attacks, and malicious software has become increasingly intelligent and powerful. We can't help thinking, in the future Internet world, is anti-virus software still not part of the puzzle?
Security never exists in the PC World
For a long time in the past, the security issues we mentioned today did not exist in the PC world. The emergence of anti-virus software is not to help early operating systems a
I don't know how to defend. How can I attack? Preventing problems before they happen may be the basic prerequisite for ensuring the effectiveness of any security means. Because of the diversity and complexity of malware, it is the most effective way to prevent malware. Practice has proved that the discovery and removal of malware is time-consuming and laborious.
ProxyBack technical analysis: can turn your computer into a proxy server malware
On the Internet, anonymous proxy plays an important role in protecting personal privacy. However, when someone turns their system into a proxy server without permission, their situation is dangerous.
Palo Alto Networks researchers have discovered a family of malware called ProxyBack and discovered that since March 2014, more th
This article describes how to view the status of the Exchange2013 malware filter, and if you want to use a third-party malware filter, you also need to disable your own filters, see below1.EXCHANGE2013 provides anti-spam protection and also provides anti-mail malware functionality.There are three anti-malware protectio
Office2016 How to set up a tutorial to prevent malware attack operations
The latest news is that Microsoft has finally introduced an important security feature for Office 2016 that can be used to keep away from macro malware attacks. For years, the "macro virus" has been a mishap in the Office suite. Despite the convenience of macro operations, there are still a lot of attackers who look at it and believe
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.