KernelMode Rootkits: Part 2, IRP hooks
KernelMode Rootkits explained. This is the second part of this rootkit writing tutorial in which we will detail the basics about kernel rootkits.
KernelMode Rootkits: Part 1, SSDT hooks
KernelMode Rootkits explained. This is the first part of this rootkit writing tutorial in which we will detail the basics about kernel rootkits.
How to Remove Necurs (Guide)
Got infected with Necurs rootkit? Follow this step by step guide to get rid of it. Our guide also includes a short analysis of the malware.
Business frauduleux sur Facebook : Un regard dans les coulisses
Nous avons tous eu des posts Facebook partagés par nos amis avec un titre attractif, incitant au clic. Nous avons cliqué pour vous, vous allez être déçus.
Chronicles of a PE Infector
Writing and Analysis of a portable executable (PE) infector. Educational tutorial on how to write your own PE infector that remains hidden in the system.
Symmi Ransomware Decryption
Anlysis of Win32.Symmi Ransomware – Learn how this ransomware encrypts your files, and how to defeat it to decrypt your personal data.
Carberp bootkit : How self-protection is effective
Analysis of the Carberp bootkit capabilities to hide into the system, and self protect its components with a filter driver.
Carberp anti-rapport : Beating Trusteer protection
Carberp Anti Rapport Trusteer – How the Carberp malware is defeating Anti Rapport (from Trusteer) to gain access to the bank account of a victim.