Tag: SANS Internet Storm Center, InfoCON: green

CTRL-Z DLL Hooking, (Wed, Sep 17th)

When you&#x27re debugging a malware sample, you probably run it into a debugger and define some breakpoints. The idea is to take over the program control before it will perform “interesting” actions. Usually, we set breakpoints on memory management API…

Web Searches For Archives, (Sun, Sep 14th)

Johannes wrote a diary entry “Increasing Searches for ZIP Files” where he analyzed the increase of requests for ZIP files (like backup.zip, web.zip, …) for our web honeypots. This article has been indexed from SANS Internet Storm Center, InfoCON: green…