Gophish – Open-Source Phishing Toolkit
Gophish is an open-source phishing toolkit designed for businesses and penetration testers. It provides the ability to quickly and easily...
OSINT
Aaia – AWS Identity And Access Management Visualizer And Anomaly Finder
Aaia (pronounced as shown here ) helps in visualizing AWS IAM and Organizations in a graph format with help of...
Reverse Engineering a Philips TriMedia CPU based IP Camera – Part 3
Introduction Welcome to the final chapter of the Trimedia series. In the first part of the series, I introduced this...
A Deep Dive Into Samsung’s TrustZone (Part 2)
Introduction After detailing Samsung's TrustZone implementation in the first part of this series, this blog post introduces the tools that...
A Deep Dive Into Samsung’s TrustZone (Part 1)
Motivations After a general introduction on the ARM TrustZone and a focus on Qualcomm's implementation, this new series of articles...
A Glimpse Into Tencent’s Legu Packer
Introduction This blog post deals with the Legu packer, an Android protector developed by Tencent that is currently one of...
Irma Past and Future
Introduction Irma is our file security analysis software, originally developed as an open source project with the sponsorship of 5...
The authorities of Uzbekistan to launch a national mining pool
Uzbekistan plans to legalize mining by providing the status of a participant in the mining pool, which is planned to...
European Union likely to ban Facial Recognition for 5 years
The EU (Europian Union) is considering restricting the use of facial recognition technology for a possible duration of 5 years,...
Adult Webcam Models’ Private and Sexual Data Compromised!
Undoubtedly, being an "Adult Webcam Model" means living a "revealing" life "out in the open". But to an extent where...
Scallion – GPU-based Onion Addresses Hash Generator
Scallion lets you create vanity GPG keys and .onion addresses (for Tor's hidden services) using OpenCL.Scallion runs on Mono (tested...
Bluewall – A Firewall Framework Designed For Offensive And Defensive Cyber Professionals
Bluewall is a firewall framework designed for offensive and defensive cyber professionals. This framework allows Cybersecurity professionals to quickly setup...
Smartphone shopaholic
Have you ever noticed strange reviews of Google Play apps that look totally out of place? Their creators might give...
Operation AppleJeus Sequel
The Lazarus group is currently one of the most active and prolific APT actors. In 2018, Kaspersky published a report...
How we developed our simple Harbour decompiler
https://github.com/KasperskyLab/hb_dec Every once in a while we get a request that leaves us scratching our heads. With these types of...
OilRig’s Poison Frog – old samples, same trick
After we wrote our private report on the OilRig leak, we decided to scan our archives with our YARA rule,...
Kaspersky Security Bulletin 2019. Statistics
All the statistics used in this report were obtained using Kaspersky Security Network (KSN), a distributed antivirus network that works...
Business in the front, party in the back: backdoors in elastic servers expose private data
It seems like every day we read another article about a data breach or leak of cloud storage exposing millions...
52 Hackers get into the US Army system in the last 5 weeks
Last year, during October and November, 52 hackers were able to hack the US army. "It only strengthens our security...
Over 600 Million Users Download 25 ‘Fleeceware’ Apps from the Play Store
Researchers at security firm Sophos has discovered a new set of Android apps present on the Google Play Store that...
AntiCheat-Testing-Framework – Framework To Test Any Anti-Cheat
Framework to test any Anti-Cheat on the market. This can be used as Template or Code Base to test any...
Gowitness – A Golang, Web Screenshot Utility Using Chrome Headless
gowitness is a website screenshot utility written in Golang, that uses Chrome Headless to generate screenshots of web interfaces using...
Active Exploitation of Citrix NetScaler (CVE-2019-19781): What You Need to Know
On Dec. 17, 2019, a directory traversal vulnerability was announced in the Citrix Application Discovery Controller and Citrix Gateway, which...
Renewed Emotet phishing activity targets UN, government and military users
Since resuming operations after a holiday hiatus, the malicious actors behind the Emotet banking trojan network have reportedly targeted at...
