Blog | ReversingLabs | Threat Research (12)

Threat Research (12)

July 16, 2019

Catching deceptive links before the click

Email-based attacks are a nightmare personified for every defender out there. The average organization receives thousands upon thousands of email messages carrying attachments and links every day.

June 21, 2019

Digital Certificates - Models for Trust and Targets for Misuse

To automate the whole process, different actors have been developing tools that can spoof entire certificate chains and automatically sign applications.

May 28, 2019

Digital Certificates – Models for Trust and Targets for Misuse

Blog 4: Self-signed certificates have a bad reputation and are generally viewed as unsafe, but what most don’t realize is that legitimate use cases do exist.

May 13, 2019

Digital Certificates – Models for Trust and Targets for Misuse

Certificates guarantee the origin and integrity of the message, package, application or document they are signing.

April 17, 2019

Digital Certificates – Models for Trust and Targets for Misuse

Blog 2: Trust-based models in the age of supply chain attacks: Trust is a well-understood concept each of us uses in our daily lives.

April 9, 2019

Digital Certificates – Models for Trust and Targets for Misuse

Blog 1: Building secure certificate whitelists - Whitelisting is an exercise in building and maintaining trust-based relationships. Digital certificates provide a standardized way for an organization to implement whitelisting

March 27, 2019

Forging the ShadowHammer

Operation ShadowHammer is a new and highly targeted supply chain attack discovered by Kaspersky Lab. The attack leveraged ASUS Live Update software to distribute malicious code

October 26, 2018

Integrating Isolation with Analytics

ReversingLabs and Menlo Security Integration

September 24, 2018

Three New DDE Obfuscation Methods

Cisco Talos and ReversingLabs discover a new spam campaign spreading the Adwind 3.0 remote access tool (RAT), ReversingLabs details three new DDE obfuscation methods.

July 27, 2018

Detecting Certificate-Signed Malware

On July 9th 2018 ESET published a blog indicating strains of Plead malware are misusing D-Link certificates

Software Supply Chain Security

File Security

Security Operations

Products

Technology

Industry

Partners

Alliances

Resources

Company

Events

Press

Threat Research (12)

Catching deceptive links before the click

Digital Certificates - Models for Trust and Targets for Misuse

Digital Certificates – Models for Trust and Targets for Misuse

Digital Certificates – Models for Trust and Targets for Misuse

Digital Certificates – Models for Trust and Targets for Misuse

Digital Certificates – Models for Trust and Targets for Misuse

Forging the ShadowHammer

Integrating Isolation with Analytics

Three New DDE Obfuscation Methods

Detecting Certificate-Signed Malware

Topics

Special Reports

The 2025 Software Supply Chain Security Report

Upcoming Webinars

ConversingLabs

Threat Research (12)

Topics

Follow us

Subscribe

Special Reports