Blog | Polito | Masterful Cyber Security

All Posts
Threat Hunting
Dark Web
Events
Vulnerability Assessments
SIEM
Business Continuity / Disaster Reco
Digital Forensics
Antivirus
Botnets
Exploits
Malware
Mobile Apps
Penetration Testing
Tools
Cyber Industry

Mar 3, 2020
9 min

Automated Obfuscation of Windows Malware and Exploits Using O-LLVM

Today’s malware authors and exploit developers have automated methods of obfuscating their software, When these techniques are combined with

The CISO asked me to run Ransomware on his laptop

Fred Mastrippolito

Jun 18, 2019
2 min

The CISO asked me to run Ransomware on his laptop

The executive’s laptop had the very latest version of a cloud-based, next-generation antivirus endpoint detection and response software, whi

Using Intezer Analyze to Reveal Malware Ancestry and Assist Incident Response and Forensic Investiga

Liana Parakesyan

Feb 21, 2019
4 min

Using Intezer Analyze to Reveal Malware Ancestry and Assist Incident Response and Forensic Investiga

Today, much of the malware still operates via the same concept of infecting machines and spreading throughout networks. Due to this, it only

Ian Duffy

Nov 15, 2017
4 min

Unpacking script2exe Malware

Script2exe functions by packaging the original VBScript as an encrypted resource within a PE stub. The original script is retained in the EX

Prepare for Ransomware: Delivery and Defense (Part 3 in a Series on Ransomware)

Roman Romanenco

Jan 13, 2017
8 min

Prepare for Ransomware: Delivery and Defense (Part 3 in a Series on Ransomware)

Understanding the individualized ransomware delivery tactics allows us to determine what countermeasures and defense techniques can be put i

Deconstructing the Ransomware Kill Chain (Part 2 in a Series on Ransomware)

Roman Romanenco

Aug 19, 2016
5 min

Deconstructing the Ransomware Kill Chain (Part 2 in a Series on Ransomware)

Understanding each stage of the ransomware kill chain allows us to determine what countermeasures and defense techniques can be put in place

The Proliferation of Ransomware (Part 1 in a Series on Ransomware)

Roman Romanenco

Jul 18, 2016
5 min

The Proliferation of Ransomware (Part 1 in a Series on Ransomware)

Crypto-ransomware (often referred to as simply ransomware, including here) is a type of malware that maliciously encrypts victim files (focu

Polito, Inc.

Jun 23, 2016
5 min

Unwrap Your Malware

Wrapped files have a script or executable in their body, which they drop and run upon execution; e.g., an EXE file drops a batch script in t

The Simplicity of VBA Malware (Part 2 of 2)

Robin Williams

Jan 29, 2016
7 min

The Simplicity of VBA Malware (Part 2 of 2)

Dridex can typically be detected on a compromised machine by looking for some if its hallmark artifacts. It does not set a persistence key i

The Simplicity of VBA Malware (Part 1 of 2)

Robin Williams

Jan 5, 2016
5 min

The Simplicity of VBA Malware (Part 1 of 2)

Macro malware targets Microsoft Office applications (Word, Excel, etc.). Malicious VBA macros are used to infect anyone who opens the file,

{"items":["5f7f32ec2ee5370017eb4c3c","5f7f32ec2ee5370017eb4c3e","5f7f32ec2ee5370017eb4c40","5f7f32ec17f2b60017c9349c","5f7f32ec6798ff00179146c5","5f7f32ec6798ff00179146c6","5f7f32ec6798ff00179146c7","5f7f32ec6798ff00179146c8","5f7f32ec6798ff00179146cb","5f7f32ec6798ff00179146cc"],"styles":{"galleryType":"Columns","groupSize":1,"showArrows":true,"cubeImages":true,"cubeType":"fill","cubeRatio":1.3333333333333333,"isVertical":true,"gallerySize":30,"collageAmount":0,"collageDensity":0,"groupTypes":"1","oneRow":false,"imageMargin":32,"galleryMargin":0,"scatter":0,"rotatingScatter":"","chooseBestGroup":true,"smartCrop":false,"hasThumbnails":false,"enableScroll":true,"isGrid":true,"isSlider":false,"isColumns":false,"isSlideshow":false,"cropOnlyFill":false,"fixedColumns":1,"enableInfiniteScroll":true,"isRTL":false,"minItemSize":50,"rotatingGroupTypes":"","rotatingCropRatios":"","columnWidths":"","gallerySliderImageRatio":1.7777777777777777,"numberOfImagesPerRow":1,"numberOfImagesPerCol":1,"groupsPerStrip":0,"borderRadius":0,"boxShadow":0,"gridStyle":1,"mobilePanorama":false,"placeGroupsLtr":true,"viewMode":"preview","thumbnailSpacings":4,"galleryThumbnailsAlignment":"bottom","isMasonry":false,"isAutoSlideshow":false,"slideshowLoop":false,"autoSlideshowInterval":4,"bottomInfoHeight":0,"titlePlacement":"SHOW_ON_THE_RIGHT","galleryTextAlign":"center","scrollSnap":false,"itemClick":"nothing","fullscreen":true,"videoPlay":"hover","scrollAnimation":"NO_EFFECT","slideAnimation":"SCROLL","scrollDirection":0,"scrollDuration":400,"overlayAnimation":"FADE_IN","arrowsPosition":0,"arrowsSize":23,"watermarkOpacity":40,"watermarkSize":40,"useWatermark":true,"watermarkDock":{"top":"auto","left":"auto","right":0,"bottom":0,"transform":"translate3d(0,0,0)"},"loadMoreAmount":"all","defaultShowInfoExpand":1,"allowLinkExpand":true,"expandInfoPosition":0,"allowFullscreenExpand":true,"fullscreenLoop":false,"galleryAlignExpand":"left","addToCartBorderWidth":1,"addToCartButtonText":"","slideshowInfoSize":200,"playButtonForAutoSlideShow":false,"allowSlideshowCounter":false,"hoveringBehaviour":"NEVER_SHOW","thumbnailSize":120,"magicLayoutSeed":1,"imageHoverAnimation":"NO_EFFECT","imagePlacementAnimation":"NO_EFFECT","calculateTextBoxWidthMode":"PERCENT","textBoxHeight":0,"textBoxWidth":200,"textBoxWidthPercent":50,"textImageSpace":10,"textBoxBorderRadius":0,"textBoxBorderWidth":0,"loadMoreButtonText":"","loadMoreButtonBorderWidth":1,"loadMoreButtonBorderRadius":0,"imageInfoType":"ATTACHED_BACKGROUND","itemBorderWidth":1,"itemBorderRadius":0,"itemEnableShadow":false,"itemShadowBlur":20,"itemShadowDirection":135,"itemShadowSize":10,"imageLoadingMode":"BLUR","expandAnimation":"NO_EFFECT","imageQuality":90,"usmToggle":false,"usm_a":0,"usm_r":0,"usm_t":0,"videoSound":false,"videoSpeed":"1","videoLoop":true,"jsonStyleParams":"","gallerySizeType":"px","gallerySizePx":940,"allowTitle":true,"allowContextMenu":true,"textsHorizontalPadding":-30,"itemBorderColor":{"themeName":"color_12","value":"rgba(153,153,153,1)"},"showVideoPlayButton":true,"galleryLayout":2,"targetItemSize":940,"selectedLayout":"2|bottom|1|fill|true|0|true","layoutsVersion":2,"selectedLayoutV2":2,"isSlideshowFont":false,"externalInfoHeight":0,"externalInfoWidth":0.5},"container":{"width":940,"galleryWidth":972,"galleryHeight":0,"scrollBase":0,"height":null}}

Automated Obfuscation of Windows Malware and Exploits Using O-LLVM

The CISO asked me to run Ransomware on his laptop

Using Intezer Analyze to Reveal Malware Ancestry and Assist Incident Response and Forensic Investiga

Unpacking script2exe Malware

Prepare for Ransomware: Delivery and Defense (Part 3 in a Series on Ransomware)

Deconstructing the Ransomware Kill Chain (Part 2 in a Series on Ransomware)

The Proliferation of Ransomware (Part 1 in a Series on Ransomware)

Unwrap Your Malware

The Simplicity of VBA Malware (Part 2 of 2)

The Simplicity of VBA Malware (Part 1 of 2)

Contact Us

Our Address

Call Us