Tag Archive

An event log can be remotely cleared and backed up with the help of ElfClearELFW, which is an MS-EVEN function. And this function also involves two parameters and here below …

Zscaler ThreatLabz found a new backdoor called ‘WarHawk’ being used by the SideWinder APT threat group to target entities in Pakistan. The SideWinder group goes by the names Rattlesnake, Hardcore …

It has recently been discovered by the security researchers at Guardio Labs that a new malvertising campaign is on the loose. This malicious campaign is intended to achieve the following …

The malware analysis tools simply allow us to know in a quick and effective way, what actions a threat makes in the system. In this way, you can easily collect …

Researchers at ESET found a new version of the Android malware ‘FurBall’ targeting Iranian citizens in mobile surveillance campaigns conducted by the Domestic Kitten hacking group, also called APT-C-50. Earlier …

Microsoft Azure Service Fabric has been exposed to a spoofing vulnerability that has been unveiled recently in a proof-of-concept exploit. The flaw has been tracked as CVE-2022-35829 with medium severity …

The SafeBreach Labs research team has detected a new fully undetectable (FUD) In this case, two PowerShell scripts are designed, the first one is to connect to a remote command-and-control …

The security researchers at threat intelligence firm SOCRadar informed Microsoft of a misconfigured Microsoft endpoint on September 24, 2022. Sensitive information for some Microsoft customers was exposed by a misconfigured …

Windows event logging provides detailed information like source, username, computer, type of event, and level, and shows a log of application and system messages, including errors, information messages, and warnings. …