Matthew Peterson

Cybersecurity Professional | Malware Researcher | Threat Hunter

[The Tor Project @torproject]

It's Tor, not TOR. Pass it on.

[Alexandre Borges @ale_sp_brazil]

Malware threats can use different approaches for well-known operations, such as deleting a file:

1. CreateFile( ) + SetFileInformationByHandle( ) + CloseHandle( )

2. CreateFile( ), specifying FILE_FLAG_DELETE_ON_CLOSE + CloseHandle( )

3. DeleteFile( ) -- of course

#malware

[Alexandre Borges @ale_sp_brazil]

Malwoverview 4.3 is alive! I've included support for Malware Bazaar and ThreatFox (@abuse_ch):

https://t.co/SfVTmQUgEC

It also offers information from VT, HA, Malpedia, Polyswarm, URLHaus, Alien Vault, ThreatCrowd, Malshare and Valhalla.

#threathunting #malware #cyberthreats

[Matthew Peterson @PetersonMatthew]

Happy Friday #infosec community. Take some time to recharge. We all need it.

[Lenny Zeltser @lennyzeltser]

If you like hearing about new Linux tools for malware analysis, follow @REMnux even if you're not using this toolkit.

[Alexandre Borges @ale_sp_brazil]

(good reading) A41APT case ~ Analysis of the Stealth APT Campaign Threatening Japan

https://t.co/zGGea2YL35

#apt41 #cyberthreat #malware #cybersecurity

[CyberSecurity Tools @cyberdian_tools]

OWASP ASST (Automated Software Security Toolkit) - A Novel Open Source Web Security Scanner - ... https://t.co/bU3F12iqDh #CyberSecurity #InfoSec #TousSecNum #CyberTools

[Matthew Peterson @PetersonMatthew]

Well folks, I finally decided to create a Twitter account. Let the shit posting begin! #infosec

[Alexandre Borges @ale_sp_brazil]

Two years ago, during a very important conference, I remembered on a common technique used by malware using native code to load .NET runtime and execute malicious managed code. Surprisingly, the same technique has been still used frequently.

#malware #dotnet #programming