software malware

Today, "Rogue software" has become between the virus and normal software between a special software exists, and as the general software writers for money bundled "rogue software" increased, the intrusion of the user's behavior more and more fierce, exactly this harm to conti

Recently, we have been talking about the usage of Ubuntu Dash and other different features, but all of them ignore the security. It does not mean that there is no Ubuntu SECURITY Article, but that security is not emphasized as the mainstream. In this article, Matt Hartley, author of Datamation, will describe how to protect Ubuntu security. Linux malware We all think that Linux is invincible, and all Linux versions are not threatened by

Vulnerabilities in Cisco FirePower firewalls allow malware Bypass Detection Security Vulnerabilities in CISCO FirePower firewall devices allow malware to bypass the detection mechanism. Cisco is releasing security updates to a critical vulnerability (CVE-2016-1345) that affects FirePower firewall, one of Cisco's latest products. This vulnerability was first discovered by security researchers at Check Poin

Havex: malware targeting industrial control devices Over the past year, we have maintained a high degree of attention to the Havex malicious program family and the organizations behind it. Havex is considered to be a malware that targets different industries and is particularly interested in the energy industry in the initial report. Havex mainly consists of Remote Access Trojan (RAT) and server programs wr

Worrying: a large number of malware emerged after the release of Intel chip vulnerability PoC, worrying about poc Recently, security researchers found that more and more malware samples on the market are trying to develop variants using Intel's previously exposed CPU Security Vulnerabilities (Meltdown and Spectre. According to a survey by experts from many foreign security companies, 119 samples of PoC cod

Shortcuts have recently become a common communication carrier used to spread malware in targeted attacks. Symantec has found many shortcut files used to penetrate the network, as described in previous blog articles. I recently stumbled upon a case where such shortcuts bypass security protection software and successfully fool the recipient to execute malware in th

In the previous article, I gave you a personal computer security strategy to avoid social engineering harm. This article describes how to prevent malware and how to use ThreatFire.First, take the initiative to deal with malware Traditional signature-based anti-virus software is increasingly under suspicion, so cloud security is becoming increasingly popular. As

various abnormal events accurately from ranges of sensor log files without high Compu Tational costs.The statistical information of this dataset is summarized as: No. of Sample No. of Features No. of Classes No. of Training No. of testing 82,363 243 8 57,654 24,709 Task 3:android Malware ClassificationThis dataset was created from a set of APK (application package) file

With the increasing complexity of malware, enterprises must extend their security best practices to join the double-layer security technology. Currently, there are many dual-layer security technologies. Attack Detection Systems (BDS), as a supplement to single-layer security tools, are worth the ability to detect malware. Specifically, the attack detection can identify the initial status of the malicious

Remnux is a Linux-based system for reverse engineering and malicious analysis.Code. The software installed on remnux includes: Analyze flash malware: swfttools, flasm, flare, rabcdasmand xxxswf. py Interacting with IRC bots: IRC server (inspire ircd) and client (epic5) Observe and interact with network activities: Wireshark, honeyd, inetsim, fakedns, fakesmtp, Netcat, networkminer, ngrep, pdnstool a

In this article, we will introduce various anti-Debugging techniques used by malware to impede reverse engineering, so as to help readers better understand these technologies, this enables more effective dynamic detection and analysis of malware.I. Anti-debugging technology Anti-debugging is a common anti-detection technique, because malware always tries to monitor its own code to detect whether it is being

Malware hidden in the Registry-PoweliksA few days ago, GData, a foreign security company, found a relatively new type of malware and defined it as Poweliks. This malware can persistently infect the target machine, it is novel that the software will not install any files on the target host. Poweliks only stores its comp

This article describes how to view the status of the Exchange2013 malware filter, and if you want to use a third-party malware filter, you also need to disable your own filters, see below1.EXCHANGE2013 provides anti-spam protection and also provides anti-mail malware functionality.There are three anti-malware protectio