Techblog | G DATA SECURITY BLOG

Techblog

SmartVMI

02/03/2022

Research Project: SmartVMI

Allcome clipbanker is a newcomer in underground forums

14/02/2022

Allcome clipbanker is a newcomer in underground forums

QR codes on Twitter deliver malicious Chrome extension

03/02/2022

QR codes on Twitter deliver malicious Chrome extension

Merck wins Not Petya claim – but the future of cybersecurity insurance is complicated

27/01/2022

Merck wins Not Petya claim – but the future of cybersecurity insurance is complicated

Malware vaccines can prevent pandemics, yet are rarely used

19/01/2022

Malware vaccines can prevent pandemics, yet are rarely used

An overview of malware hashing algorithms

30/09/2021

All your hashes are belong to us: An overview of malware hashing algorithms

Microsoft signed a malicious Netfilter rootkit

25/06/2021

Microsoft signed a malicious Netfilter rootkit

08/06/2021

Picture this: Malware Hides in Steam Profile Images

Malware family naming hell is our own fault

07/06/2021

Malware family naming hell is our own fault

1
Writing Signatures for .NET Malware

2
Unboxing Anubis: Exploring the Stealthy Tactics of FIN7's Latest Backdoor

3
Smoked out - Emmenhtal spreads SmokeLoader malware

4
Unveiling AsyncRAT

5
Exploring GenAI in Cybersecurity: Gemini for Malware Analysis

6
BBTok Targeting Brazil: Deobfuscating the .NET Loader with dnlib and PowerShell

7
A Kernel Land Rootkit Loader for FK_Undead

Our Authors

Karsten Hahn

Karsten Hahn

Principal Malware Researcher

Tim Berghoff

Tim Berghoff

Security Evangelist