Discover and read the best of Twitter Threads about #Sophos
Most recents (2)
1/5
La #Sicurezza nella P.A. al tempo di #Kaspersky.
@AdmGov (nota agenzia fiscale italiana): riassunto in tre screenshot (vds. tweet successivi)
La #Sicurezza nella P.A. al tempo di #Kaspersky.
@AdmGov (nota agenzia fiscale italiana): riassunto in tre screenshot (vds. tweet successivi)
3/5
Browser: #InternetExplorer 11 (ultimo aggiornamento KB4534251 risalente al 10-03-2020)
Gran parte degli #applicativi in uso girano solo sotto IE
Antivirus: dopo aver disinstallato #Sophos (un paio di mesi fa, probabilmente perché scaduto il contratto) #WindowsDefender
Browser: #InternetExplorer 11 (ultimo aggiornamento KB4534251 risalente al 10-03-2020)
Gran parte degli #applicativi in uso girano solo sotto IE
Antivirus: dopo aver disinstallato #Sophos (un paio di mesi fa, probabilmente perché scaduto il contratto) #WindowsDefender
---a thread---
We've discovered that the most recent version of Ryuk shares shellcode with Buer Loader, a malware-as-a-service trojan we've been tracking...
The shellcode is used by droppers for both malware, to inject the malware into memory.
Ryuk in-memory loader:
1/6
We've discovered that the most recent version of Ryuk shares shellcode with Buer Loader, a malware-as-a-service trojan we've been tracking...
The shellcode is used by droppers for both malware, to inject the malware into memory.
Ryuk in-memory loader:
1/6
Buer Loader in-memory loader:
2/6
2/6
Ryuk also recently started encrypting text strings—on October 4, the strings within the sample were unencrypted...
3/6
3/6
