Microsoft Windows | G DATA SECURITY BLOG

Microsoft Windows

Microsoft Windows

QR codes on Twitter deliver malicious Chrome extension

03/02/2022

QR codes on Twitter deliver malicious Chrome extension

Microsoft Windows

An overview of malware hashing algorithms

30/09/2021

All your hashes are belong to us: An overview of malware hashing algorithms

Microsoft Windows

Microsoft signed a malicious Netfilter rootkit

25/06/2021

Microsoft signed a malicious Netfilter rootkit

Microsoft Windows

08/06/2021

Picture this: Malware Hides in Steam Profile Images

Microsoft Windows

To patch or not to patch

20/04/2021

To patch or not to patch

Microsoft Windows

Spying on your Exchange Server

09/03/2021

Hafnium: Spying on your Exchange Server

Microsoft Windows

New version adds encrypted communication

17/02/2021

SectopRAT: New version adds encrypted communication

Microsoft Windows

IceRat evades antivirus by running PHP on Java VM

01/12/2020

IceRat evades antivirus by running PHP on Java VM

Microsoft Windows

Babax stealer rebrands to Osno, installs rootkit

05/11/2020

Babax stealer rebrands to Osno, installs rootkit

1
Writing Signatures for .NET Malware

2
Unboxing Anubis: Exploring the Stealthy Tactics of FIN7's Latest Backdoor

3
Smoked out - Emmenhtal spreads SmokeLoader malware

4
Unveiling AsyncRAT

5
Exploring GenAI in Cybersecurity: Gemini for Malware Analysis

6
BBTok Targeting Brazil: Deobfuscating the .NET Loader with dnlib and PowerShell

7
A Kernel Land Rootkit Loader for FK_Undead

Our Authors

Karsten Hahn

Karsten Hahn

Principal Malware Researcher

Tim Berghoff

Tim Berghoff

Security Evangelist