FLARE has brought FakeNet-NG to Linux, allowing analysts to perform basic dynamic analysis either on a single Linux host or using a separate, dedicated machine in the same way as INetSim.
Read more...Entries filed under 'Detection'
Threat Research Blog
The FireEye Labs team posts blog entries under threat research to present and discuss cyber attacks and threat intelligence from a technical perspective. They cover the full spectrum of exploits and vulnerabilities, including advanced malware and targeted threats.
Introducing Linux Support for FakeNet-NG: FLARE’s Next Generation Dynamic Network Analysis Tool
July 5, 2017 11:00 AM By Michael Bailey | Threat ResearchIncreased Use of WMI for Environment Detection and Evasion
October 7, 2016 8:00 AM By Muhammad Hasib Latif, Dr. Farrukh Shahzad | Advanced Malware, Threat Intelligence, Threat ResearchMalware writers are always looking for new ways to evade analysis frameworks and sandboxes to successfully breach targeted environments and platforms. WMI provides a simple way of environment detection to evade sandboxes and dynamic analysis tools, which seem to be underestimated by the security community. This blog looks at evasion samples.
Read more...M-Trends Asia Pacific: Organizations Must Improve at Detecting and Responding to Breaches
August 24, 2016 7:00 PM By Bryce Boland | Threat Intelligence, Threat ResearchFor the first time, FireEye releases an M-Trends report specifically for the Asia Pacific region. Find out why most breaches in this region were never made public and how much time it takes to discover breaches in the area -- as well as how that timeframe differs from the global median number of days.
Read more...Embedded Hardware Hacking 101 – The Belkin WeMo Link
August 22, 2016 8:00 AM By Gordon Johnson | Advanced Malware, Threat ResearchConnected devices are on the rise and here to stay. While they can make our lives much easier they also make easier targets for threat actors. Here we take a look at how someone could reverse engineer an embedded device, and at the process for attempting to find vulnerabilities.
Read more...Locky Ransomware Distributed Via DOCM Attachments in Latest Email Campaigns
August 17, 2016 12:15 PM By Ronghwa Chong | Advanced MalwareLocky ransomware downloaders are becoming more prevalent, and attackers are constantly changing the tools and techniques they use in their cyber campaigns. FireEye has recently observed attackers shifting from JavaScript-based downloaders to using the DOCM format.
Read more...Sign up for email updates
Get information and insight on today's advanced threats from the leader in advanced threat prevention.
