Techblog | G DATA SECURITY BLOG

Techblog

Taming the mess of AV detection names

12/08/2019

Malware Naming Hell Part 1: Taming the mess of AV detection names

What's all the buzz about? Looking at the "Ryuk" ransomware as an example.

06/08/2019

Code-Signed malware: What's all the buzz about? Looking at the "Ryuk" ransomware as an example.

Cyberdanger

25/07/2019

Book Recommendation: Cyberdanger

Server-side polymorphism & PowerShell backdoors

16/07/2019

Analysis: Server-side polymorphism & PowerShell backdoors

Skull and Crossbones, Bloated Malware, and All-In-One Solution for Ransomware

04/07/2019

Strange Bits: Skull and Crossbones, Bloated Malware, and All-In-One Solution for Ransomware

A deeper dive into the"Silentbruter" malware - Internal folder structures revealed

04/07/2019

A deeper dive into the"Silentbruter" malware - Internal folder structures revealed

Ransomware identification for the judicious analyst

12/06/2019

Ransomware identification for the judicious analyst

Sodinokibi Spam, CinaRAT, and Fake G DATA

04/06/2019

Strange Bits: Sodinokibi Spam, CinaRAT, and Fake G DATA

HTML Smuggling and GitHub Hosted Malware

09/05/2019

Strange Bits: HTML Smuggling and GitHub Hosted Malware

1 9 10 11 12 13

1
A Kernel Land Rootkit Loader for FK_Undead

2
Unveiling AsyncRAT

3
Sandbox scores are not an antivirus replacement

4
Exploring GenAI in Cybersecurity: Gemini for Malware Analysis

5
BBTok Targeting Brazil: Deobfuscating the .NET Loader with dnlib and PowerShell

6
New Infostealer sighted in the wild

Our Authors

Karsten Hahn

Karsten Hahn

Principal Malware Researcher

Tim Berghoff

Tim Berghoff

Security Evangelist