Today, Mandiant is introducing a new free tool, Memoryze™ for the Mac 1.0, which brings memory imaging and analysis to the Mac. It joins a growing list of freeware tools Mandiant currently provides.
Read more...Archive for 'June 2012'
Unibody Memory Analysis -- Introducing Memoryze™ for the Mac 1.0
June 28, 2012 4:02 PM By Seth and Steve DavisKeep Whistleblowers at Bay: The Importance of Detection & Response
June 15, 2012 6:25 PM By Richard BejtlichIn a recent TaoSecurity Blog post entitled "Whistleblowers: The Approaching Storm for Digital Security" I said, "I'm predicting that due to the increase in regulation during the last decade, whistleblowers will begin to report digital risks or incidents to their boards and/or outsiders."
Read more...Whither Security?
June 20, 2012 10:02 PM By Richard BejtlichI agreed to write this post on one condition: I had to use the word "whither" in the title.
Read more...An Ounce of Prevention: Mandiant’s Managed Defense
June 4, 2012 7:23 PM By Yanek KorffMy kids used to think they were invincible. A few cuts and scrapes later, they learned better. Soon, they'll think they know everything. Heck, they probably already do. And once they finally accept that they might not know everything, they'll still be in denial about their invincibility as it relates to their health. Come to think of it, I'm pretty sure I went through a 10-year stretch where I never saw a doctor. It's not until I learned some lessons the hard way, or watched others run into trouble, that I realized it's important to be a little more proactive about my own health. Turns out you can't just avoid things that might hurt you and hope for the best. You can still end up in trouble from something you didn't anticipate.
Read more...The “New Normal”: Taking a Proactive Approach to Cyber Security Risk Management
June 7, 2012 2:50 PM By Helena BritoNo matter what industry your company is in, you hear about organizations being compromised by targeted attacks nearly every day. It's no secret that we depend on technology to house our most valued intellectual property. It's also no secret that every organization can be a target for advanced attackers. This is the "new normal". Security breaches are inevitable; however, how you identify and respond to them is within your control.
Read more...A Momentary Diversion into the Dark Side of Personal Risk Management
June 27, 2012 9:17 PM By Kristen CooperIt's fair to say that my perception of personal risk has morphed since starting at Mandiant six months ago. Pre-Mandiant, I was free-wheeling and fancy free without a care in the online world...and then I came to work for Mandiant (dun dundun!- cue music) and I realized using simple passwords and carelessly clicking on links was just inviting targeted attacks into my inbox.
Read more...Dispelling The Myth: Bar of Security
June 22, 2012 9:33 PM By Lucas ZaichkowskyFor the last two years, I've observed the information security industry buzzing about the Advanced Persistent Threat (APT), highly sophisticated malware, and 0 day exploits. There are many reasons why these topics are often misunderstood, but I believe there's an incorrect assumption that underlies them all. It causes the wrong questions to be asked and irrelevant answers to be received. It makes executives believe prevention is the key to security, when in fact security breaches are inevitable. The myth that there's a certain level to which the "bar of security" can be raised that will keep attackers out must be dispelled.
Read more...Guest Blog: Former CIA CISO on Nation-State Security Challenges
June 15, 2012 10:40 AM By Bob Bigman
There has been a growing realization by the global cyber security community that cybercriminals of all shapes, sizes, and motivations are getting a lot better at finding and exploiting zero-day attacks. Furthermore, while the bulk of these attacks still target the Microsoft family of operating systems, increasingly attacks are being targeted at the Unix/Linux family of operating systems. Correspondingly, there is also more recent awareness of the extent of Advanced Persistent Threat (APT) Read more...
Stories About Botnets - Part 1
June 18, 2012 5:49 AM By Atif Mushtaq
The malware threat landscape is changing very fast. New and improved malware are hitting the attack surface on a daily basis. No wonder advanced malware like to operate in stealth mode. They try to change their behaviors, shapes and patterns as much as they can do to fool their enemies. Not only do we need a signature-less technology to handle such malware, but we also need a news resource continuously talking about Read more...
How Advanced Malware Bypasses Process Monitoring
June 21, 2012 9:00 AM By Michael Vincent, Abhishek Singh
One of the primary aims of an anti-virus (AV) engine is to monitor all process activity—while malware, on the other hand, wants to avoid detection by AV. The philosophy of most rootkits is to run silent and deep, which also aligns with the goals of advanced malware as it evades detection by most enterprise class host-based security solutions (HBSS) and AV.So how does malware evade detection when starting new rogue processes? Easy—it Read more...
More Flame/sKyWIper CNC Behavior Uncovered
June 25, 2012 9:00 AM By Ali Islam
When news of the Flame/SkyWiper malware hit the headlines last month, the world went into a frenzy. Flame was immediately hailed as the world’s most sophisticated malware. While security researchers will surely be talking about Flame for years to come, FireEye has since made another discovery regarding Flame’s command and control (CNC) behavior: it appears that the Flamer/sKyWIper malware’s callback has recently changed.Specifically, we have evidence that the malware is likely proxy-aware Read more...
Stories About Botnets - Part 2
June 28, 2012 7:00 AM By Atif Mushtaq
In the first part of this series, I talked about a few botnets that are using random domain generation algorithms in order to conceal their Command and Control (CnC) servers. But that's not the only type of evasion being used by advanced malware. There are other types of polymorphism as well.Some of the polymorphic strains found in these malware are as follows:Random domain generation (as I talked about in Part 1)Random URL Read more...
Sign up for email update
Get information and insight on today's advanced threats from the leader in advanced threat prevention.
