Techblog | G DATA SECURITY BLOG

Techblog

SmartVMI

03/02/2022

Research Project: SmartVMI

Allcome clipbanker is a newcomer in underground forums

02/14/2022

Allcome clipbanker is a newcomer in underground forums

QR codes on Twitter deliver malicious Chrome extension

02/03/2022

QR codes on Twitter deliver malicious Chrome extension

Merck wins Not Petya claim – but the future of cybersecurity insurance is complicated

01/27/2022

Merck wins Not Petya claim – but the future of cybersecurity insurance is complicated

Malware vaccines can prevent pandemics, yet are rarely used

01/19/2022

Malware vaccines can prevent pandemics, yet are rarely used

An overview of malware hashing algorithms

09/30/2021

All your hashes are belong to us: An overview of malware hashing algorithms

Microsoft signed a malicious Netfilter rootkit

06/25/2021

Microsoft signed a malicious Netfilter rootkit

06/08/2021

Picture this: Malware Hides in Steam Profile Images

Malware family naming hell is our own fault

06/07/2021

Malware family naming hell is our own fault

1
Writing Signatures for .NET Malware

2
Unboxing Anubis: Exploring the Stealthy Tactics of FIN7's Latest Backdoor

3
Smoked out - Emmenhtal spreads SmokeLoader malware

4
Unveiling AsyncRAT

5
Exploring GenAI in Cybersecurity: Gemini for Malware Analysis

6
BBTok Targeting Brazil: Deobfuscating the .NET Loader with dnlib and PowerShell

7
A Kernel Land Rootkit Loader for FK_Undead

Our Authors

Karsten Hahn

Karsten Hahn

Principal Malware Researcher

Tim Berghoff

Tim Berghoff

Security Evangelist