Author: mark

Meta, the parent company behind Facebook, Instagram, and WhatsApp has released what they say is a new, more modern Cyber Kill Chain – A list of the stages and events by which threat actors prepare and conduct cyber attacks. The Original Kill Chain Back in 2011, Lockheed Martin developed a […]

Google have recently announced that their zero-day research team (Project zero) have discovered and reported 18 zero-day vulnerabilities in the Exynos chipsets used in Samsung devices. This chipset is the beating heart of Samsung technologies, and is used in most Samsung devices whether they be Mobile, Automotive, Wearable, Modem, or […]

The Domain Name System (DNS) has been a crucial part of the Internet / WWW since its conception back in 1983. Invented by Paul Mockapetris whilst he was a member of the Information Sciences Institute at the University of Southern California, DNS is the system which connects the human readable […]

The perpetrators of ransomware attacks are pretty low with their moral standing, but a recent attack by the BlackCat gang shows that they can sink to some very low depths. In the blog I posted yesterday, I highlighted a ransomware gang called ALPHAV, who also go by the names BlackCat, […]

In this blog I’ll cover two breaking events which might be very significant in the coming weeks/months. If you’ve been following my posts over the last few months, you will have noticed a common theme in many of them – The theme of ransomware. Well that theme continues with two […]

The (adapted) most iconic poster tagline for any film starts this blog*, and with good reason, a new variant of the Xenomorph banking trojan has been seen in the wild causing issues for Android users. The cybercriminal gang Hadoken Secury Group has somewhat boringly named this new variant Xenomorth 3rd […]

The FBI announced on Thursday (9th March) that they had seized a domain which had been used to sell a Network Remote Administration Tool which was actually a malicious application that allowed threat actors to compromise computers across the globe. The domain seized was worldwiredlabs.com, and the malware in question […]

Nearly every website you visit requires you to create a user account and think up a password. As discussed in my blog on passwords back in January, this can be quite a task for some to remember a different set of credentials for every account they own. So in this […]

Stealerium is an open-source stealer malware available on GitHub, and as the name suggests, the malware steals information from various applications as well as the host device. The applications targeted by Stealerium include: The malware employs multiple anti-analysis techniques in its attempts to stay persistent on an infected device. These […]

For this 4th and final installment in this mini-series, I will take a look at the ZeroNet system. What is ZeroNet? ZeroNet is an open-source, distributed, peer-to-peer web hosting service which has been available since 2015. When accessing a Zeronet hosted website, the entire content of the site is downloaded […]