Blog | ReversingLabs | Research (5)

Research (5)

Digital Certificates – Models for Trust and Targets for Misuse

May 13, 2019

Digital Certificates – Models for Trust and Targets for Misuse

Certificates guarantee the origin and integrity of the message, package, application or document they are signing.

Digital Certificates – Models for Trust and Targets for Misuse

April 17, 2019

Digital Certificates – Models for Trust and Targets for Misuse

Blog 2: Trust-based models in the age of supply chain attacks: Trust is a well-understood concept each of us uses in our daily lives.

Digital Certificates – Models for Trust and Targets for Misuse

April 9, 2019

Digital Certificates – Models for Trust and Targets for Misuse

Blog 1: Building secure certificate whitelists - Whitelisting is an exercise in building and maintaining trust-based relationships. Digital certificates provide a standardized way for an organization to implement whitelisting

Forging the ShadowHammer

March 27, 2019

Forging the ShadowHammer

Operation ShadowHammer is a new and highly targeted supply chain attack discovered by Kaspersky Lab. The attack leveraged ASUS Live Update software to distribute malicious code

Integrating Isolation with Analytics

October 26, 2018

Integrating Isolation with Analytics

ReversingLabs and Menlo Security Integration

Three New DDE Obfuscation Methods

September 24, 2018

Three New DDE Obfuscation Methods

Cisco Talos and ReversingLabs discover a new spam campaign spreading the Adwind 3.0 remote access tool (RAT), ReversingLabs details three new DDE obfuscation methods.

Detecting Certificate-Signed Malware

July 27, 2018

Detecting Certificate-Signed Malware

On July 9th 2018 ESET published a blog indicating strains of Plead malware are misusing D-Link certificates

ReversingLabs' YARA rule detects a Cobalt payload exploiting CVE-2017-11882

November 22, 2017

ReversingLabs' YARA rule detects a Cobalt payload exploiting CVE-2017-11882

A 17-year-old vulnerability in Microsoft Office Equation Editor is now confirmed to be exploited by the Cobalt Group.

ReversingLabs' YARA rule detects BadRabbit encryption routine specifics

October 26, 2017

ReversingLabs' YARA rule detects BadRabbit encryption routine specifics

BadRabbit a previously unknown ransomware family which started spreading on October 24th.

Constant Insecurity: Things you didn’t know about (PE) Portable Executable file format

July 2, 2011

Constant Insecurity: Things you didn’t know about (PE) Portable Executable file format

Constant Insecurity: Things you didn’t know about (PE) Portable Executable file format

Reversing software compressions: Tale of dragons and men who slay them

July 2, 2011

Reversing software compressions: Tale of dragons and men who slay them

Reverse engineering compressed binaries has been a necessity for more than a two decades now

Reverse engineering software protections

July 2, 2011

Reverse engineering software protections

Learn how to do in depth analysis of compressed and encrypted binary files