Good morning folks
My apologies for the delay on this one. It appears the the wily coyote has passed on his tricks to my Internet connection and as such I’ve been offline for a fairly large portion of time. No matter….onward to the readables !!
Malware
An in-depth code analysis of mssecmgr.ocx from the ESET folks is here.
The Virus Total crew are bringing some seriously cool features to VT. More here
Another Monday has been and gone (on this side of the world at least). I thought I’d sit down again and share some of the interestingness (yes, that’s a word now) that came through my various news feeds over the course of the weekend. I’m hoping this week will be a little less malware focused, but I can’t make any promises.
news.source == “twitter”
@mboman: New blog post: MART - Malware Analyst Research Toolkit: Cuckoo Sandbox:
Good evening/morning folks.
It’s been fairly busy here at HNP HQ for a number of reasons. That said, there were a number of interesting articles over the weekend I thought I’d hilight here for your reading pleasure. This week seems to be a week of malware so we will stick with that theme.
STORIES ABOUT BOTNETS - PART 1
Malware Hunting with the Sysinternals Tools (video)
Obfuscation #2: Playing entrypoint hide & seek game with dyld
Just a quick note to you let everybody know that the videos from 2011 Honeynet Project Security Workshop has been posted. The slides can be obtained at the same location.
Here is another tool release from The Honeynet Project: Cuckoo Box by Claudio Guarnieri. Cuckoo is a binary analysis sandbox, designed and developed with the general purpose of automating the analysis of malware. Read more about the tool here, grab the tool here – but please read detailed setup guide here (make sure to read it!). BTW, this tool is really well-documented, so make use of it before deploying it.
It is with great pleasure I announce the first-ever Honeynet Project Public Conference, held alongside with the traditional Honeynet Project Annual Workshop. The event will be held on March 21, 2011 in Paris. For those who just want to register now, go here.
Date: 21 March 2011 (Monday)
8:30AM ~ 18:00PM (GMT+1)
Location:
ESIEA Paris, 9 rue Vesale 75005 Paris
(Nearest subway station: Les Gobelins(line #7))
About the event:
The 2011 Project Honeynet Security Workshop brings together experts in the field of information security from around the world to share the latest advances and threats in information security research.