Techblog | G DATA SECURITY BLOG

Techblog

PE trick explained: Telling 32 and 64 bit apart with naked eye

05/19/2020

PE trick explained: Telling 32 and 64 bit apart with naked eye

Netwire RAT via paste.ee and MS Excel to German users

05/14/2020

Spam campaign: Netwire RAT via paste.ee and MS Excel to German users

Current Use of Virtual Machine Detection Methods

05/08/2020

Techniques: Current Use of Virtual Machine Detection Methods

Pekraut - German RAT starts gnawing

04/02/2020

Pekraut - German RAT starts gnawing

dispelling preconceptions by talking to presales

03/05/2020

Switching providers made easy - dispelling preconceptions by talking to presales

Malware samples threaten PCs and networks every few seconds

03/03/2020

Well-disguised attacks: Malware samples threaten PCs and networks every few seconds

Presenting a Graph-based User Interface for Malware Analysis at the Global Graph Summit

02/27/2020

Presenting a Graph-based User Interface for Malware Analysis at the Global Graph Summit

Changing passwords regularly damages security

02/25/2020

Password rules: Changing passwords regularly damages security

Bitbucket Abused as Malware Slinger

02/06/2020

40,000 CryptBot Downloads per Day: Bitbucket Abused as Malware Slinger

1
Writing Signatures for .NET Malware

2
Unboxing Anubis: Exploring the Stealthy Tactics of FIN7's Latest Backdoor

3
Smoked out - Emmenhtal spreads SmokeLoader malware

4
Unveiling AsyncRAT

5
Exploring GenAI in Cybersecurity: Gemini for Malware Analysis

6
BBTok Targeting Brazil: Deobfuscating the .NET Loader with dnlib and PowerShell

7
A Kernel Land Rootkit Loader for FK_Undead

Our Authors

Karsten Hahn

Karsten Hahn

Principal Malware Researcher

Tim Berghoff

Tim Berghoff

Security Evangelist