For some time I’ve been seeing the Angler exploit kit pop up and infect clients without through malvertising campaigns without having a referer when visitng the landing page. The reason…

For some time I’ve been seeing the Angler exploit kit pop up and infect clients without through malvertising campaigns without having a referer when visitng the landing page. The reason…

While investigating an unrelated threat I ran into a rather interesting njRat campaign. It started with a website that was compromised and being abused as a 3rd layer C2 communication…

While investigating an unrelated threat I ran into a rather interesting njRat campaign. It started with a website that was compromised and being abused as a 3rd layer C2 communication…

Edit 27-5-2015: I added a download link to the memory dump of the machine I used in this article for others to learn from and play around with volatility. On…

Edit 27-5-2015: I added a download link to the memory dump of the machine I used in this article for others to learn from and play around with volatility. On…

For some time I’ve been seeing the Angler exploit kit pop up and infect clients without through malvertising campaigns without having a referer when visitng the landing page. The reason…

For some time I’ve been seeing the Angler exploit kit pop up and infect clients without through malvertising campaigns without having a referer when visitng the landing page. The reason…

Before starting this write-up I have to thank Thomas from CERT-Bund for sharing some of the intelligence he has on this. For the past weeks a spike has been seen…

Edit 27-5-2015: I added a download link to the memory dump of the machine I used in this article for others to learn from and play around with volatility. On…