Microsoft Windows | G DATA SECURITY BLOG

Microsoft Windows

Microsoft Windows

Writing Signatures for .NET Malware

04/08/2025

100 Days of YARA: Writing Signatures for .NET Malware

Microsoft Windows

Vidar Stealer: Revealing A New Deception Strategy

04/07/2025

Vidar Stealer: Revealing A New Deception Strategy

Microsoft Windows

More layers in malware campaigns are not a sign of sophistication

08/15/2024

Opinion: More layers in malware campaigns are not a sign of sophistication

Microsoft Windows

Backdoor BadSpace delivered by high-ranking infected websites

06/12/2024

Backdoor BadSpace delivered by high-ranking infected websites

Microsoft Windows

GoTo Meeting loads Remcos RAT via Rust Shellcode Loader

05/13/2024

GoTo Meeting loads Remcos RAT via Rust Shellcode Loader

Microsoft Windows

Identifying file manipulation in system files

09/21/2022

Identifying file manipulation in system files

Microsoft Windows

Criminals provide Ginzo stealer for free, now it is gaining traction

04/21/2022

Criminals provide Ginzo stealer for free, now it is gaining traction

Microsoft Windows

Living off the land

03/08/2022

An attacker's toolchest: Living off the land

Microsoft Windows

Allcome clipbanker is a newcomer in underground forums

02/14/2022

Allcome clipbanker is a newcomer in underground forums

1
Writing Signatures for .NET Malware

2
Unboxing Anubis: Exploring the Stealthy Tactics of FIN7's Latest Backdoor

3
Smoked out - Emmenhtal spreads SmokeLoader malware

4
Unveiling AsyncRAT

5
Exploring GenAI in Cybersecurity: Gemini for Malware Analysis

6
BBTok Targeting Brazil: Deobfuscating the .NET Loader with dnlib and PowerShell

7
A Kernel Land Rootkit Loader for FK_Undead

Our Authors

Karsten Hahn

Karsten Hahn

Principal Malware Researcher

Tim Berghoff

Tim Berghoff

Security Evangelist