Microsoft Windows | G DATA SECURITY BLOG

Microsoft Windows

Microsoft Windows

QR codes on Twitter deliver malicious Chrome extension

02/03/2022

QR codes on Twitter deliver malicious Chrome extension

Microsoft Windows

An overview of malware hashing algorithms

09/30/2021

All your hashes are belong to us: An overview of malware hashing algorithms

Microsoft Windows

Microsoft signed a malicious Netfilter rootkit

06/25/2021

Microsoft signed a malicious Netfilter rootkit

Microsoft Windows

06/08/2021

Picture this: Malware Hides in Steam Profile Images

Microsoft Windows

To patch or not to patch

04/20/2021

To patch or not to patch

Microsoft Windows

Spying on your Exchange Server

03/09/2021

Hafnium: Spying on your Exchange Server

Microsoft Windows

New version adds encrypted communication

02/17/2021

SectopRAT: New version adds encrypted communication

Microsoft Windows

IceRat evades antivirus by running PHP on Java VM

12/01/2020

IceRat evades antivirus by running PHP on Java VM

Microsoft Windows

Babax stealer rebrands to Osno, installs rootkit

11/05/2020

Babax stealer rebrands to Osno, installs rootkit

1
Writing Signatures for .NET Malware

2
Unboxing Anubis: Exploring the Stealthy Tactics of FIN7's Latest Backdoor

3
Smoked out - Emmenhtal spreads SmokeLoader malware

4
Unveiling AsyncRAT

5
Exploring GenAI in Cybersecurity: Gemini for Malware Analysis

6
BBTok Targeting Brazil: Deobfuscating the .NET Loader with dnlib and PowerShell

7
A Kernel Land Rootkit Loader for FK_Undead

Our Authors

Karsten Hahn

Karsten Hahn

Principal Malware Researcher

Tim Berghoff

Tim Berghoff

Security Evangelist