Warning | G DATA SECURITY BLOG

Warning

Spying on your Exchange Server

03/09/2021

Hafnium: Spying on your Exchange Server

IceRat evades antivirus by running PHP on Java VM

12/01/2020

IceRat evades antivirus by running PHP on Java VM

New Java STRRAT ships with .crimson ransomware module

06/16/2020

New Java STRRAT ships with .crimson ransomware module

Netwire RAT via paste.ee and MS Excel to German users

05/14/2020

Spam campaign: Netwire RAT via paste.ee and MS Excel to German users

Pekraut - German RAT starts gnawing

04/02/2020

Pekraut - German RAT starts gnawing

Malware samples threaten PCs and networks every few seconds

03/03/2020

Well-disguised attacks: Malware samples threaten PCs and networks every few seconds

Bitbucket Abused as Malware Slinger

02/06/2020

40,000 CryptBot Downloads per Day: Bitbucket Abused as Malware Slinger

Early detection and repulsion of dangerous attacks

12/12/2019

G DATA IT Security Trends 2020: Early detection and repulsion of dangerous attacks

Remote access malware utilizes second desktop to control browsers

11/21/2019

New SectopRAT: Remote access malware utilizes second desktop to control browsers

1
Writing Signatures for .NET Malware

2
Unboxing Anubis: Exploring the Stealthy Tactics of FIN7's Latest Backdoor

3
Smoked out - Emmenhtal spreads SmokeLoader malware

4
Unveiling AsyncRAT

5
Exploring GenAI in Cybersecurity: Gemini for Malware Analysis

6
BBTok Targeting Brazil: Deobfuscating the .NET Loader with dnlib and PowerShell

7
A Kernel Land Rootkit Loader for FK_Undead

Our Authors

Karsten Hahn

Karsten Hahn

Principal Malware Researcher

Tim Berghoff

Tim Berghoff

Security Evangelist