Palo Alto Networks

Malware

Google Chrome Exploitation – A Case Study

In this write-up, we will present several techniques used in exploiting a vulnerability in Google Chrome, and the various difficulties presented by its security mechanisms and considerations. We also offer some reflections regarding how some of the techniques used were made irrelevant by mitigations introduced since.

Endpoint

Malware

Unit 42

Dec 14, 2014

By Palo Alto Networks

Palo Alto Networks

Products and Services

Partners

Malware, Threat Prevention, Unit 42

Unit 42 Explores Malware Attack Vectors in Key Industries

This week Unit 42 released its first Threat Landscape Review, looking at how malware trends affect key industries, from healthcare to high tech, around the world, and the particular persistence of the Kuluoz, o...

Dec 11, 2014

By Palo Alto Networks

Endpoint, Malware, Predictions

2015 Predictions: Endpoint Security

As 2014 comes to a close, our subject matter experts check in on what they see as major topics and trends for the new year. (You can read all of our 2015 predictions content here.)

Dec 11, 2014

By Sebastian Goodwin

Malware, Reports, Threat Prevention, Unit 42, Vertical

How Malware Trends Affect Key Industries, From Healthcare to High Tech

Today we released our first Threat Landscape Review, which takes a high-level view of how malware is delivered to networks across major industries aro...

Dec 10, 2014

By Ryan Olson

Malware, Unit 42

Learn More About WireLurker and the Impact to OS X and iOS

Recently Palo Alto Networks researcher Claud Xiao discovered WireLurker, a new family of Apple OS X and iOS malware with characteristics unseen in any previously documented threats...

Dec 05, 2014

By Chad Berndtson

Malware, Threat Prevention, Unit 42

Follow-On to VBA-Initiated Infostealer Campaign: Exploring Related Malware ...

In late October, we began examination of a VBA-initiated Infostealer campaign. This blog post follows up on additional information we gathered on rela...

Dec 03, 2014

By Rob Downs and Vicky Ray

Malware, Unit 42

Tracking the WireLurker Arrests

Not quite ten days after we released our white paper on WireLurker, arrests have already been made in China. WireLurker is a new family of malware specifically targeting iOS devices via USB. There is WireLurker malware for both Mac OS X and Microsoft Windows operating...

Nov 17, 2014

By Jen Miller-Osborn

Malware, Mobility

The Grey Area in App Behaviors: It’s Not Malware, But It’s Still a Concern

Beyond the glitzy hardware and the mind-blowing specs of your smartphone and tablet, the real factor for determining functionality comes from the apps. Most apps are not out do har...

Nov 17, 2014

By Brian Tokuyoshi

Cybersecurity, Malware, SCADA & ICS, Threat Prevention

Defend Your SCADA Network from Zero Day Threats with the WildFire Appliance

Palo Alto Networks recently announced availability of PAN-OS 6.1, the newest version of our operating system. As with all our operating system releas...

Nov 13, 2014

By Del Rodillas

Malware, Threat Prevention, Unit 42

The Question of WireLurker Attribution: Who Is Responsible?

After news of WireLurker began circulating in handful Chinese-language tech forums over the summer, a Chinese-language technology blogger conducted on...

Nov 10, 2014

By Jen Miller-Osborn

Malware, Threat Prevention, Unit 42

WireLurker for Windows

Yesterday we published a whitepaper introducing WireLurker, the first malware attacking both non-jailbroken and jailbroken iOS devices from a Mac OS X system. Shortly after we released the paper, Jaime Blasco from AlienVault Labs notified u...

Nov 06, 2014

By Claud Xiao and Royce Lu

Malware, Mobility, Reports, Threat Prevention, Unit 42

WireLurker: A New Era in OS X and iOS Malware

Today we published a new research paper on WireLurker, a family of malware targeting both Mac OS and iOS systems for the past six months. We believe that this malware family heralds a new era in malware attacki...

Nov 05, 2014

By Claud Xiao

Malware, Threat Prevention, Unit 42

Examining a VBA-Initiated Infostealer Campaign

While Microsoft documents that leverage malicious, embedded Visual Basic for Applications (VBA) macros are not a new thing, their use has noticeably increased this year, thanks in part to their simplicity and e...

Oct 29, 2014

By Vicky Ray and Rob Downs

Cybersecurity, Malware, Threat Prevention, Unit 42

Dridex Banking Trojan Distributed Through Word Documents

Dridex, the latest descendent of the Bugat/Feodo/Cridex banking Trojan lineage has been a constant source of attacks using the malware since its release in July. To date, Dridex has centered on sending executab...

Oct 24, 2014

By Ryan Olson

Cybersecurity, Malware, Threat Prevention, Web Security

Knowledge Is Power: Using Cyber Scrutiny To Defend Against Phishing Attacks

Some of you may have even clicked the “Verify Now” link and entered your Apple ID account information. I hope not, though, because this email is not f...

Oct 23, 2014

By Palo Alto Networks

Malware, Threat Advisory/Analysis, Threat Prevention, Unit 42

Tracking New Ransomware CryptoWall 2.0

The latest development in the ransomware world is CryptoWall 2.0, a new version of this malware family that uses the Tor network for command and control.

Oct 22, 2014

By Ryan Olson

Cybersecurity, Malware, Mobility

Palo Alto Networks Wins Mobile Security Solution of the Year

Palo Alto Networks recently won Mobile Security Solution of the Year at the 2014 Computing Security Awards in London, honoring GlobalProtect. (more&h...

Oct 18, 2014

By Chad Berndtson

Malware, Threat Prevention, Unit 42

Rovnix and the Declaration Generation Algorithm

Since the success of Conficker in 2008, multiple malware families have started using Domain Generation Algorithms (DGAs) to make their command and control infrastructure more resilient to take-down. By generati...

Oct 10, 2014

By Ryan Olson

Malware, Threat Prevention, Unit 42

New Indicators of Compromise for APT Group Nitro Uncovered

In mid-July of this year, we noticed yet another legitimate website had been compromised by APT actors and was serving malware. In this case, it was a...

Oct 03, 2014

By Jen Miller-Osborn

Endpoint, Malware, PCI compliance, Vertical

Closing the Security Gaps of PCI DSS Compliance Requirements

For many years, compliance has been a key driver for security decisions and investments. For industries like financial services, compliance represents...

Oct 02, 2014

By Palo Alto Networks

Financial Services, Malware, Unit 42, Vertical

Malware Trending: STUN Awareness

Session Traversal Utilities for NAT (STUN) is a network protocol with standardized methods that enables an internal network address space host employing Network Address Translation (NAT) to determine its Internet-facing/public IP address.

Sep 30, 2014

By Rob Downs and Ryan Olson

Load more blogs

Get the latest news, invites to events, and threat alerts

By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement.

Palo Alto Networks

Malware

Google Chrome Exploitation – A Case Study

Palo Alto Networks

Subscribe to the Newsletter!

Get the latest news, invites to events, and threat alerts

Get the latest news, invites to events, and threat alerts

Products and Services

Company

Popular Links