Microsoft Windows | G DATA SECURITY BLOG

Microsoft Windows

Microsoft Windows

Writing Signatures for .NET Malware

08/04/2025

100 Days of YARA: Writing Signatures for .NET Malware

Microsoft Windows

Vidar Stealer: Revealing A New Deception Strategy

07/04/2025

Vidar Stealer: Revealing A New Deception Strategy

Microsoft Windows

More layers in malware campaigns are not a sign of sophistication

15/08/2024

Opinion: More layers in malware campaigns are not a sign of sophistication

Microsoft Windows

Backdoor BadSpace delivered by high-ranking infected websites

12/06/2024

Backdoor BadSpace delivered by high-ranking infected websites

Microsoft Windows

GoTo Meeting loads Remcos RAT via Rust Shellcode Loader

13/05/2024

GoTo Meeting loads Remcos RAT via Rust Shellcode Loader

Microsoft Windows

Identifying file manipulation in system files

21/09/2022

Identifying file manipulation in system files

Microsoft Windows

Criminals provide Ginzo stealer for free, now it is gaining traction

21/04/2022

Criminals provide Ginzo stealer for free, now it is gaining traction

Microsoft Windows

Living off the land

08/03/2022

An attacker's toolchest: Living off the land

Microsoft Windows

Allcome clipbanker is a newcomer in underground forums

14/02/2022

Allcome clipbanker is a newcomer in underground forums

1
Writing Signatures for .NET Malware

2
Unboxing Anubis: Exploring the Stealthy Tactics of FIN7's Latest Backdoor

3
Smoked out - Emmenhtal spreads SmokeLoader malware

4
Unveiling AsyncRAT

5
Exploring GenAI in Cybersecurity: Gemini for Malware Analysis

6
BBTok Targeting Brazil: Deobfuscating the .NET Loader with dnlib and PowerShell

7
A Kernel Land Rootkit Loader for FK_Undead

Our Authors

Karsten Hahn

Karsten Hahn

Principal Malware Researcher

Tim Berghoff

Tim Berghoff

Security Evangelist