Another day I was watching this video (link and player below) about ideas on how to detect injection attacks via CobaltStrike, which is such a powerful offensive testing solution. I realized that many of the ideas presented in the video somehow relate to SECRET papers; Here I explain how. The Read more…
In case you are a security professional, you likely already know about the Solarwinds hacking case. In case you aren’t, you can check it here. In a brief, their software was backdoor-ed and distributed to many customers. Here are our thoughts about the case and the associated payloads. An important Read more…
Another day, another ransomware! It seems Brazil has been facing a ransomware wave and this time Embraer, the Brazilian aircraft manufacturer, was the target (Check news here). Here our brief analysis goes. The file said to have attacked Embraer is available in our sandbox solution (link here). It is a Read more…
We have previously analyzed a malware sample claimed to have attacked the Brazilian Justice Court (Check here). After that, a new payload arrived. It is a Windows malware–available on Virustotal (check here)–, such that we are not sure what is its relation with the previous Linux one. Anyway, let’s analyze Read more…
Yesterday, the world got the news that the Brazilian Supreme Justice Court was the target of a ransomware attack, and had all of their data (and backup) encrypted (check here). What really motivated this attack is still unclear, and several questions arise: Was it performed by a cyber criminal? A Read more…
Last month SECRET started a collaboration with researchers from the University of Waikato, located in Hamilton, New Zealand. The University of Waikato is famous for developing open-source machine learning frameworks, such as Weka, MOA, and scikit-multiflow. The main objective of this collaboration is to develop novel machine learning solutions that Read more…
Here we are again! This time our principal investigator, Andre Grégio, attended the ENIGMA 2020 conference, which took place at San Francisco, CA, USA. This was our second time at the conference, last year two of our PhD students were awarded (diversity grant). The goal of ENIGMA is to clearly Read more…
Applying machine learning techniques to cyber security has become popular nowadays. The majority of existing work aim to produce results that achieve accuracy, f1 score and precision rates close to 100%, without taking into account problems such as adversarial samples. In our work, “Shallow Security: on the Creation of Adversarial Read more…
Marcus’ RevEngE against malware! This week SECRET arrived in Vienna to participate of the Reversing and Offensive-oriented Trends Symposium 2019 (ROOTS). Marcus discussed challenges and pitfalls of decompiling malicious samples and presented RevEnge, the Reverse Engineering Engine. RevEngE is a Proof-of-Concept (PoC) tool to the debug-oriented decompilation approached that we Read more…
Brazil hosted the 4th BRICS Young Scientist Forum, which main themes were cybersecurity and bioeconomy and took place in Rio de Janeiro from November 6th to November 8th, 2019. André Grégio attended the event and was able to share our SECRETs with the community, presenting some of our ongoing works!