Palo Alto Networks

Threat Advisory/Analysis

Inside TDrop2: Technical Analysis of new Dark Seoul Malware

Inside TDrop2: Technical Analysis of new Dark Seoul Malware

Palo Alto Networks recently identified a new campaign targeting the transportation sector in Europe with ties to the Dark Seoul and Operation Troy campaigns that took place in 2013. This new campaign used updated instances of the Tdrop malware family discovered in the Operation Troy campaign. For more information on the new campaign discovered by Unit 42, please refer to our recent blog post.

Cybersecurity
Threat Advisory/Analysis
Unit 42
Nov 23, 2015
By 

Palo Alto Networks

Announcements
Company & Culture
Points of View
Public Sector
Products and Services
Partners
Application Advisory/Analysis, Cybersecurity, Malware, Threat Advisory/Analysis, Threat Prevention, Unit 42

Bad Certificate Management in Google Play Store

Following a recent study of apps in the Google Play Store, let’s discuss several security risks caused by the bad certificate management practiced in...
Aug 28, 2014
By  and
Cybersecurity, Malware, Threat Advisories - Advisories, Threat Advisory/Analysis, Threat Prevention, Unit 42

Examining the CHS Breach and Heartbleed Exploitation

Yesterday, TrustedSec, a security consultancy based on Ohio, wrote that the recent breach at Community Health Systems (CHS) was the result of exploita...
Aug 20, 2014
By 
Threat Advisory/Analysis, Unit 42

Insecure Internal Storage in Android

Today, Palo Alto Networks researcher Claud Xiao is delivering a presentation titled “Insecure Internal Storage in Android” at the Hacks in Taiwan Conference (HITCON).
Aug 18, 2014
By  and
Threat Advisory/Analysis, Threat Prevention, Unit 42

Attacks on East Asia using Google Code for Command and Control

Recently, FireEye published a blog titled “Operation Poisoned Hurricane” which detailed the use of PlugX malware variants signed with legitimate certi...
Aug 15, 2014
By  and
Malware, Threat Advisories - Advisories, Threat Advisory/Analysis, Threat Prevention, Unit 42

Hunting the Mutex

Mutex analysis is an often overlooked and useful tool for malware author fingerprinting, family classification, and even discovery. Far from the hypothesized "huge amount of variability" in mutex names, likely...
Aug 14, 2014
By 
Cybersecurity, Threat Advisory/Analysis, Threat Prevention, Unit 42

Palo Alto Networks Identifies 21 New Critical Vulnerabilities in Internet E...

Today, Microsoft patched 59 Internet Explorer vulnerabilities, 21 of them discovered by Palo Alto Networks researchers. Palo Alto Networks is committe...
Jun 10, 2014
By 
Cybersecurity, Threat Advisory/Analysis, Threat Prevention, Unit 42

How To Defend Against Advanced IE Exploitation

In February, Microsoft awarded $100,000 to Yu Yang (@Tombkeeper) for reporting a new mitigation bypass technique as part of Microsoft’s Bounty Program. Yu later demonstrated his re...
Jun 06, 2014
By 
Cybersecurity, Threat Advisories - Advisories, Threat Advisory/Analysis, Unit 42

The Latest Kuluoz Spam Campaign Kicks Off

At 06:47 PST on May 20 Palo Alto Networks WildFire detected the start of the latest Kuluoz spam campaign. The total number of e-mails detected quickly rose to over 30,000 per hour...
May 20, 2014
By 

Subscribe to the Newsletter!

Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.

By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.

Get the latest news, invites to events, and threat alerts