Three New DDE Obfuscation Methods
The natural order of things is to evolve, so it was just a matter of time until obfuscations and variations would start appearing in the wild.
Threat Research
Three New DDE Obfuscation Methods
Detecting Certificate-Signed Malware
Join ReversingLabs Research on a Threat Hunt for revoked D-Link certificates
ReversingLabs' YARA rule detects a Cobalt payload exploiting CVE-2017-11882
A 17-year-old vulnerability in Microsoft Office Equation Editor is now confirmed to be exploited by the Cobalt Group
ReversingLabs' YARA rule detects BadRabbit encryption routine specifics
BadRabbit a previously unknown ransomware family which started spreading on October 24th
Constant Insecurity: Things you didn’t know about (PE) Portable Executable file format
One constant challenge of modern security will always be the difference between published and implemented specifications.
Reverse engineering software protections
Learn how to do in depth analysis of compressed and encrypted binary files.
Reversing software compressions: Tale of dragons and men who slay them
Reverse engineering compressed binaries has been a necessity for more than a two decades now, and we as reverse engineers are always on a lookout for newest and fastest ways of accomplishing our goal.