FAUTLReports

Restoring Reflective Code Loading on macOS

2024-12-16

Author: Patrick Wardle

malware_types:fileless malware_types:loader file_types:so file_types:go techniques:encryption platforms:windows file_types:cpp platforms:macos file_types:mach-o file_types:dylib

AI Models for Decompiling Assembly Code

2024-11-16

RevEng.AI

file_types:so file_types:go file_types:c platforms:windows disassembler:ida pro disassembler:ghidra

BrazenBamboo Weaponizes FortiClient Vulnerability to Steal VPN Credentials via DEEPDATA

2024-11-15

VOLEXITY

Author: Callum Roxan, Charlie Gardner, Paul Rascagneres

platforms:windows malware_types:zero-day platforms:ios

Analysis of Evolving Evasion Tradecraft in Commodity Malware and Command-and-Control Frameworks

2024-09-05

RevEng.AI

file_types:dll techniques:system calls file_types:so malware_types:virus platforms:windows architecture:x64 techniques:hooking techniques:exfiltration

PhysMem(e): When Kernel Drivers Peek into Memory CVE-2024-41498

2024-09-05

RevEng.AI

file_types:pe file_types:so file_types:go file_types:c platforms:windows disassembler:ida pro debugger:windbg cve:cve-2024-41498

The Hidden Treasures of Crash Reports

2024-08-13

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:so file_types:c platforms:windows platforms:macos platforms:ios architecture:arm64

StormBamboo Compromises ISP to Abuse Insecure Software Update Mechanisms

2024-08-02

VOLEXITY

Author: Ankur Saini, Paul Rascagneres, Steven Adair, Thomas Lancaster

platforms:windows platforms:macos

From The DPRK With Love

2022-05-09

Objective-See

Author: Patrick Wardle

file_types:zip file_types:bin architecture:x86_64 file_types:so file_types:php file_types:javascript platforms:windows file_types:css file_types:json file_types:mach-o

Storm Cloud on the Horizon: GIMMICK Malware Strikes at macOS

2022-03-22

VOLEXITY

Author: Damien Cash, Steven Adair, Thomas Lancaster

platforms:windows platforms:macos

SysJoker, the first (macOS) malware of 2022!

2022-01-11

Objective-See

Author: Patrick Wardle

file_types:zip platforms:linux file_types:txt file_types:bin architecture:x86_64 file_types:sh file_types:so platforms:windows architecture:arm64 file_types:mach-o

Creating Shield

2021-03-10

Objective-See

Author: Csaba Fitzl

techniques:code injection file_types:so file_types:go file_types:c platforms:windows file_types:swift platforms:macos file_types:dylib file_types:objective-c

Property List Parsing Bug(s)

2020-10-21

Objective-See

Author: @OSCartography

file_types:so file_types:go platforms:windows file_types:xml platforms:macos platforms:ios debugger:lldb file_types:dylib file_types:objective-c disassembler:ghidra

Office Drama on macOS

2020-08-04

Objective-See

Author: Patrick Wardle

file_types:zip file_types:bin file_types:dat file_types:python file_types:so platforms:windows techniques:sandbox file_types:doc file_types:swift cve:cve-2019-1457

Tiny SHell Under the Microscope

2020-06-01

Objective-See

Author: Jaron Bradley

architecture:x86_64 file_types:python file_types:so file_types:go malware_types:backdoor platforms:windows platforms:macos file_types:mach-o disassembler:hopper

The Dacls RAT ...now on macOS!

2020-05-05

Objective-See

Author: Patrick Wardle

platforms:linux file_types:bin architecture:x86_64 file_types:so platforms:windows file_types:iso file_types:swift file_types:mach-o techniques:anti-disassembly cve:cve-2019-3396

Word to Your Mac

2018-12-05

Objective-See

file_types:bin file_types:python file_types:so malware_types:downloader platforms:windows techniques:sandbox file_types:xml file_types:doc platforms:macos file_types:dylib

Surge Collect Provides Reliable Memory Acquisition Across Windows, Linux, and macOS

2018-06-12

VOLEXITY

Author: Volexity

platforms:linux platforms:windows platforms:macos

Ay MaMi - Analyzing a New macOS DNS Hijacker: OSX/MaMi

2018-01-11

Objective-See

file_types:bin architecture:x86_64 file_types:sh file_types:so platforms:windows file_types:xml platforms:macos file_types:mach-o debugger:lldb file_types:objective-c

High Sierra's 'Secure Kernel Extension Loading' is Broken

2017-09-05

Objective-See

disassembler:die file_types:sh file_types:so platforms:windows platforms:macos

MMD-0054-2016 - ATMOS botnet facts you should know

2016-06-07

MalwareMustDie

Author: unixfreaxjp

malware_types:rat malware_types:botnet file_types:so file_types:go malware_types:trojan techniques:encryption malware_families:zeus malware_types:crypter platforms:windows

Malware Analysis Reports